CVE-2026-64361
Received Received - Intake

BaseFortify

Publication date: 2026-07-25

Last updated on: 2026-07-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length check_and_correct_requested_length() compares (off + len) against node_size using u32 arithmetic. When the caller passes a large len value (e.g. from an underflowed subtraction in hfs_brec_remove()), off + len can wrap past 2^32 and produce a small result, causing the bounds check to pass when it should fail. For example, with off=14 and len=0xFFFFFFF2 (underflowed from data_off - keyoffset - size in hfs_brec_remove), off + len wraps to 6, which is less than a typical node_size of 512, so the check passes and the subsequent memmove reads ~4GB past the node buffer. Fix this by widening the addition to u64 before comparing against node_size. This prevents the u32 wrap while keeping the logic straightforward.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-25
Last Modified
2026-07-25
Generated
2026-07-25
AI Q&A
2026-07-25
EPSS Evaluated
N/A
NVD
CVE-2026-64361
EUVD
EUVD-2026-48905

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a buffer overflow vulnerability in the Linux kernel's HFS and HFS+ file system drivers. It occurs when calculating file offsets and lengths using 32-bit arithmetic, which can wrap around and produce incorrect results. Specifically, the function check_and_correct_requested_length() fails to detect when a requested memory operation would exceed buffer bounds due to this wrap-around.

Detection Guidance

This vulnerability is specific to the Linux kernel's HFS/HFS+ filesystem handling. Detection requires checking if your system runs a vulnerable kernel version. Use uname -a to check the kernel version and compare it against patched versions. Inspect filesystem operations on HFS/HFS+ volumes for unusual memory access patterns.

Impact Analysis

An attacker could exploit this to read or write memory outside intended buffer limits, potentially causing system crashes, data corruption, or privilege escalation. This could lead to unauthorized access to sensitive data or denial of service on affected systems running vulnerable Linux kernels.

Mitigation Strategies

Update your Linux kernel to the latest patched version immediately. Avoid mounting or using HFS/HFS+ filesystems from untrusted sources. If HFS/HFS+ support is not required, consider disabling the filesystem modules (hfs, hfsplus) via kernel configuration or blacklisting.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64361. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart