CVE-2026-64360 Details
Description
In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: zero-initialize buffer in hfs_bnode_read hfs_bnode_read() can return early without writing to the output buffer when is_bnode_offset_valid() fails or when check_and_correct_requested_ length() corrects the length to zero. Callers such as hfs_bnode_read_ u16() and hfs_bnode_read_u8() pass stack-allocated buffers and use the result unconditionally, leading to KMSAN uninit-value reports. Rather than initializing at each individual call site, zero the buffer at the start of hfs_bnode_read() before any validation checks. This ensures all callers in both hfs and hfsplus get a deterministic zero value regardless of which early-return path is taken.
A vulnerability exists in the Linux kernel's handling of HFS and HFSPlus file systems. The issue arises in the 'hfs_bnode_read' function, where the output buffer may not be properly filled before the function returns. This can occur if the b-node offset is invalid or if the requested length is corrected to zero. As a result, functions that read unsigned 16-bit or 8-bit values from the b-node may receive uninitialized data, leading to potential undefined behavior. This vulnerability has been reported and can be detected using the Kernel Memory Sanitizer (KMSAN).
The vulnerability has been addressed by modifying the 'hfs_bnode_read' function to zero-initialize the output buffer before any validation checks are performed. This change ensures that all callers receive a consistent, initialized value, regardless of how the function exits.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0b189b2204f1a2612dc68f8d139fb5b80539e710 | kernel.org | Patch |
| https://git.kernel.org/stable/c/16ca053c2be5f4f3044dccf7fc19237dc820d394 | kernel.org | Patch |
| https://git.kernel.org/stable/c/34684a04777358b2b40ac729e54c8e45359e46b3 | kernel.org | Patch |
| https://git.kernel.org/stable/c/8f72fd25a57a457866350359ddd27a43caa62c95 | kernel.org | Patch |
| https://git.kernel.org/stable/c/d2afc7ecee476f9251dd87444f7fb6a424410922 | kernel.org | Patch |
| https://git.kernel.org/stable/c/d5b45bad75cd2730b8452aed4d3b20a2b2a12576 | kernel.org | Patch |
| https://git.kernel.org/stable/c/d67aadee19ffdf3cc8520c5a4f4d5b2916d30baf | kernel.org | Patch |
| https://git.kernel.org/stable/c/f3461b84a4865d9b5e70fbb71da72ae044a3bcd2 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-908 | Use of Uninitialized Resource | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.4.297, < 5.5 >= 5.10.241, < 5.10.261 >= 5.15.190, < 5.15.212 >= 6.1.149, < 6.1.178 >= 6.6.103, < 6.6.145 >= 6.12.43, < 6.12.96 >= 6.15.11, < 6.16 >= 6.16.2, < 6.18.39 >= 6.19, < 7.1.4 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 4, 2026 | Initial Analysis | [email protected] |
| Aug 17, 2026 | CVE Modified | kernel.org |
| Jul 25, 2026 | New CVE Received | kernel.org |