Medium 5.5Published May 6, 2026

CVE-2026-43228hfs: Replace BUG_ON with error handling for CNID count checks

Updated under an hour ago (Oct 27, 2026, 6:23 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: hfs: Replace BUG_ON with error handling for CNID count checks In a06ec283e125 next_id, folder_count, and file_count in the super block info were expanded to 64 bits, and BUG_ONs were added to detect overflow. This triggered an error reported by syzbot: if the MDB is corrupted, the BUG_ON is triggered. This patch replaces this mechanism with proper error handling and resolves the syzbot reported bug. Singed-off-by: Jori Koolstra <jkoolstra@xs4all.nl>

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 15, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from a06ec283e125e334155fe13005c76c9f484ce759 before 559f856b109c45844816a1693e259f93d3556c61; from a06ec283e125e334155fe13005c76c9f484ce759 before b6536c1ced315fa645576d3a39c6e07f2a472962; from a06ec283e125e334155fe13005c76c9f484ce759 before b226804532a875c10276168dc55ce752944096bd	CNA record
linux linux_kernel linux:linux_kernel	from 6.18 before 6.19.6	NVD

References

References

https://git.kernel.org/stable/c/559f856b109c45844816a1693e259f93d3556c61
https://git.kernel.org/stable/c/b6536c1ced315fa645576d3a39c6e07f2a472962	patch
https://git.kernel.org/stable/c/b226804532a875c10276168dc55ce752944096bd	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.