CVE-2026-43228

kernel: hfs: Replace BUG_ON with error handling for CNID count checks

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 6, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel HFS component. A local attacker could provide a specially crafted and corrupted Master Directory Block (MDB) to trigger a kernel panic. This vulnerability, caused by improper error handling of CNID count checks, leads to a system Denial of Service (DoS).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-617 · Reachable Assertion