In the Linux kernel, the following vulnerability has been resolved:
hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
The hfsplus_bnode_read() method can trigger the issue:
[ 174.852007][ T9784] ================================================================== [ 174.852709][ T9784] BUG: KASAN: slab-out-of-bounds in hfsplus_bnode_read+0x2f4/0x360 [ 174.853412][ T9784] Read of size 8 at addr ffff88810b5fc6c0 by task repro/9784 [ 174.854059][ T9784] [ 174.854272][ T9784] CPU: 1 UID: 0 PID: 9784 Comm: repro Not tainted 6.16.0-rc3 #7 PREEMPT(full) [ 174.854281][ T9784] Hardware name: QEMU Ubuntu 24.04 PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.854286][ T9784] Call Trace: [ 174.854289][ T9784] <TASK> [ 174.854292][ T9784] dump_stack_lvl+0x10e/0x1f0 [ 174.854305][ T9784] print_report+0xd0/0x660 [ 174.854315][ T9784] ? __virt_addr_valid+0x81/0x610 [ 174.854323][ T9784] ? __phys_addr+0xe8/0x180 [ 174.854330][ T9784] ? hfsplus_bnode_read+0x2f4/0x360 [ 174.854337][ T9784] kasan_report+0xc6/0x100 [ 174.854346][ T9784] ? hfsplus_bnode_read+0x2f4/0x360 [ 174.854354][ T9784] hfsplus_bnode_read+0x2f4/0x360 [ 174.854362][ T9784] hfsplus_bnode_dump+0x2ec/0x380 [ 174.854370][ T9784] ? __pfx_hfsplus_bnode_dump+0x10/0x10 [ 174.854377][ T9784] ? hfsplus_bnode_write_u16+0x83/0xb0 [ 174.854385][ T9784] ? srcu_gp_start+0xd0/0x310 [ 174.854393][ T9784] ? __mark_inode_dirty+0x29e/0xe40 [ 174.854402][ T9784] hfsplus_brec_remove+0x3d2/0x4e0 [ 174.854411][ T9784] __hfsplus_delete_attr+0x290/0x3a0 [ 174.854419][ T9784] ? __pfx_hfs_find_1st_rec_by_cnid+0x10/0x10 [ 174.854427][ T9784] ? __pfx___hfsplus_delete_attr+0x10/0x10 [ 174.854436][ T9784] ? __asan_memset+0x23/0x50 [ 174.854450][ T9784] hfsplus_delete_all_attrs+0x262/0x320 [ 174.854459][ T9784] ? __pfx_hfsplus_delete_all_attrs+0x10/0x10 [ 174.854469][ T9784] ? rcu_is_watching+0x12/0xc0 [ 174.854476][ T9784] ? __mark_inode_dirty+0x29e/0xe40 [ 174.854483][ T9784] hfsplus_delete_cat+0x845/0xde0 [ 174.854493][ T9784] ? __pfx_hfsplus_delete_cat+0x10/0x10 [ 174.854507][ T9784] hfsplus_unlink+0x1ca/0x7c0 [ 174.854516][ T9784] ? __pfx_hfsplus_unlink+0x10/0x10 [ 174.854525][ T9784] ? down_write+0x148/0x200 [ 174.854532][ T9784] ? __pfx_down_write+0x10/0x10 [ 174.854540][ T9784] vfs_unlink+0x2fe/0x9b0 [ 174.854549][ T9784] do_unlinkat+0x490/0x670 [ 174.854557][ T9784] ? __pfx_do_unlinkat+0x10/0x10 [ 174.854565][ T9784] ? __might_fault+0xbc/0x130 [ 174.854576][ T9784] ? getname_flags.part.0+0x1c5/0x550 [ 174.854584][ T9784] __x64_sys_unlink+0xc5/0x110 [ 174.854592][ T9784] do_syscall_64+0xc9/0x480 [ 174.854600][ T9784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.854608][ T9784] RIP: 0033:0x7f6fdf4c3167 [ 174.854614][ T9784] Code: f0 ff ff 73 01 c3 48 8b 0d 26 0d 0e 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 08 [ 174.854622][ T9784] RSP: 002b:00007ffcb948bca8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 174.854630][ T9784] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6fdf4c3167 [ 174.854636][ T9784] RDX: 00007ffcb948bcc0 RSI: 00007ffcb948bcc0 RDI: 00007ffcb948bd50 [ 174.854641][ T9784] RBP: 00007ffcb948cd90 R08: 0000000000000001 R09: 00007ffcb948bb40 [ 174.854645][ T9784] R10: 00007f6fdf564fc0 R11: 0000000000000206 R12: 0000561e1bc9c2d0 [ 174.854650][ T9784] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.854658][ T9784] </TASK> [ 174.854661][ T9784] [ 174.879281][ T9784] Allocated by task 9784: [ 174.879664][ T9784] kasan_save_stack+0x20/0x40 [ 174.880082][ T9784] kasan_save_track+0x14/0x30 [ 174.880500][ T9784] __kasan_kmalloc+0xaa/0xb0 [ 174.880908][ T9784] __kmalloc_noprof+0x205/0x550 [ 174.881337][ T9784] __hfs_bnode_create+0x107/0x890 [ 174.881779][ T9784] hfsplus_bnode_find+0x2d0/0xd10 [ 174.882222][ T9784] hfsplus_brec_find+0x2b0/0x520 [ 174.882659][ T9784] hfsplus_delete_all_attrs+0x23b/0x3 ---truncated---
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade perfUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.242-239.961Upgrade kernel-debuginfo-common-x86_64 | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 25, 2025 | Sep 25, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 14, 2025 | Sep 4, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 4, 2025 |
| Suse | — | Upgrade dtb-lgUpgrade kernel-azureUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatchUpgrade dtb-sprdUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade dtb-broadcomUpgrade ocfs2-kmp-defaultUpgrade dtb-marvellUpgrade dtb-nvidiaUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-develUpgrade dtb-rockchipUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-default-base-rebuildUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade kernel-rt_debugUpgrade dtb-caviumUpgrade kernel-azure-extraUpgrade cluster-md-kmp-rtUpgrade kernel-rt-vdsoUpgrade dlm-kmp-rtUpgrade dtb-freescaleUpgrade kernel-debug-vdsoUpgrade dtb-renesasUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-optionalUpgrade kernel-obs-buildUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade kernel-azure-optionalUpgrade kernel-defaultUpgrade kselftests-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-symsUpgrade dtb-appleUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade dtb-exynosUpgrade dlm-kmp-azureUpgrade dtb-amazonUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-syms-azureUpgrade dtb-armUpgrade dtb-amlogicUpgrade gfs2-kmp-64kbUpgrade dtb-amdUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade dtb-mediatekUpgrade dtb-apmUpgrade kernel-docsUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-syms-rtUpgrade kernel-devel-rtUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmallUpgrade dtb-qcomUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade kernel-debug-develUpgrade kernel-devel-azureUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade dtb-hisilicon | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-fipsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-generic-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibm-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-gke-5.15Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-lowlatency-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-gkeop-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-intelUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-generic-5.15Upgrade linux-image-virtualUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-aws-64k-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-kvm-5.15Upgrade linux-image-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1102-azureUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-fipsUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-xilinxUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-gke-64k-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-ibm-5.15Upgrade linux-image-gke-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-azureUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-oem-20.04cUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gke-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-raspiUpgrade linux-image-virtual-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-azure-fips-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-xilinx-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gkeUpgrade linux-image-aws-6.8Upgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-realtime-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8 | Dec 5, 2025 | Sep 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Sep 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub