CVE-2026-43228
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
06/05/2026
Last modified:
06/05/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
hfs: Replace BUG_ON with error handling for CNID count checks<br />
<br />
In a06ec283e125 next_id, folder_count, and file_count in the super block<br />
info were expanded to 64 bits, and BUG_ONs were added to detect<br />
overflow. This triggered an error reported by syzbot: if the MDB is<br />
corrupted, the BUG_ON is triggered. This patch replaces this mechanism<br />
with proper error handling and resolves the syzbot reported bug.<br />
<br />
Singed-off-by: Jori Koolstra