Description
In the Linux kernel, the following vulnerability has been resolved: hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() When the volume header contains erroneous values that do not reflect the actual state of the filesystem, hfsplus_fill_super() assumes that the attributes file is not yet created, which later results in hitting BUG_ON() when hfsplus_create_attributes_file() is called. Replace this BUG_ON() with -EIO error with a message to suggest running fsck tool.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
95e0d7dbb9b28ab0dfad7c7316066b05e1f1d4cd to < bb0eea8e375677f586ad11c12e2525ed3fc698c2affected95e0d7dbb9b28ab0dfad7c7316066b05e1f1d4cd to < 9046566fa692f88954dac8c510f37ee17a15fdb7affected95e0d7dbb9b28ab0dfad7c7316066b05e1f1d4cd to < 03cd1db1494cf930e2fa042c9c13e32bffdb4ebaaffected95e0d7dbb9b28ab0dfad7c7316066b05e1f1d4cd to < dee5c668ad71ddbcb4b48d95e8a4f371314ad41daffected95e0d7dbb9b28ab0dfad7c7316066b05e1f1d4cd to < b3359392b75395a31af739a761f48f4041148226affected95e0d7dbb9b28ab0dfad7c7316066b05e1f1d4cd to < 1bb8da27ff15e346d4bc9e248e819c9a88ebf9d6affected95e0d7dbb9b28ab0dfad7c7316066b05e1f1d4cd to < d768e3ed430e89a699bf89d3214dcbbf4648c939affected95e0d7dbb9b28ab0dfad7c7316066b05e1f1d4cd to < ce5e387f396cbb5c061d9837abcac731e9e06f4daffected95e0d7dbb9b28ab0dfad7c7316066b05e1f1d4cd to < c7c6363ca186747ebc2df10c8a1a51e66e0e32d9affected
Linux Linux
Default version status: affected
3.13affected0 to < 3.13unaffected5.4.297 to ≤ 5.4.*unaffected5.10.241 to ≤ 5.10.*unaffected5.15.190 to ≤ 5.15.*unaffected6.1.149 to ≤ 6.1.*unaffected6.6.103 to ≤ 6.6.*unaffected6.12.43 to ≤ 6.12.*unaffected6.15.11 to ≤ 6.15.*unaffected6.16.2 to ≤ 6.16.*unaffected6.17 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/bb0eea8e375677f586ad11c12e2525ed3fc698c2 ↗
- https://git.kernel.org/stable/c/9046566fa692f88954dac8c510f37ee17a15fdb7 ↗
- https://git.kernel.org/stable/c/03cd1db1494cf930e2fa042c9c13e32bffdb4eba ↗
- https://git.kernel.org/stable/c/dee5c668ad71ddbcb4b48d95e8a4f371314ad41d ↗
- https://git.kernel.org/stable/c/b3359392b75395a31af739a761f48f4041148226 ↗
- https://git.kernel.org/stable/c/1bb8da27ff15e346d4bc9e248e819c9a88ebf9d6 ↗
- https://git.kernel.org/stable/c/d768e3ed430e89a699bf89d3214dcbbf4648c939 ↗
- https://git.kernel.org/stable/c/ce5e387f396cbb5c061d9837abcac731e9e06f4d ↗
- https://git.kernel.org/stable/c/c7c6363ca186747ebc2df10c8a1a51e66e0e32d9 ↗
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html ↗
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-032379.html ↗