CVE-2026-46299

A flaw was found in the hfsplus filesystem component of the Linux kernel. An issue exists in the hfsplus_fill_super() function where a lock is not properly released during an error handling path. This can occur when certain conditions cause hfsplus_cat_build_key() to fail during filesystem initialization. A local attacker could potentially exploit this memory management flaw, leading to system instability or a denial of service (DoS) condition.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.