CVE-2026-43268

A flaw was found in the HFS Plus (hfsplus) filesystem within the Linux kernel. This vulnerability occurs because the hfsplus filesystem incorrectly identifies certain special filesystem objects as regular files. This misclassification can lead to inconsistencies with how the operating system's Virtual File System (VFS) layer expects to handle different types of files, potentially causing unexpected behavior or issues during file operations.

This vulnerability is rated as Moderate because exploitation requires local access to mount or access a specially crafted HFS Plus filesystem, limiting the blast radius to a local denial of service without compromising data confidentiality or system integrity. The HFS Plus filesystem driver is not commonly used in enterprise server environments and is not loaded by default. Systems that do not mount untrusted HFS Plus volumes or have the filesystem module disabled are not exposed to this issue.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.