01 Record

CVE-2026-64361

hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.13% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 3.0% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-09-04.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-07-25 08:50Z1 MO AGO

Last updated

2026-08-17 04:54Z18 DAYS AGO

Reserved

2026-07-19

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-191Integer Underflow (Wrap or Wraparound)Base

Data version

5.2

Document digest

fc383b2f5693b7a98477a8f8dbfad55a7169eac7e5feb232333145cfc6111130

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux67ecc81f6492275c9c54280532f558483c99c90e to < c8dd112173c02adf539fe2ad34a45f5e0068780d, a1a60e79502279f996e55052f50cc14919020475 to < fc9d1447ca3cdc78d2e4ace1ce1f3a7c77ca08b1, fe2891a9c43ab87d1a210d61e6438ca6936e2f62 to < 671c3fcc2ad31c1311ea6414382a2d95104ae1b9, 384a66b89f9540a9a8cb0f48807697dfabaece4c to < b6a481642ea1977be2f84dc08c5affd742c177e7, efc095b35b23297e419c2ab4fc1ed1a8f0781a29 to < 7399c3baee7bb622a92f0b895cd4d3009a693f2b, a431930c9bac518bf99d6b1da526a7f37ddee8d8 to < 607217f7ad419b53926f71e3f75001813bbc08ad, a431930c9bac518bf99d6b1da526a7f37ddee8d8 to < c25d3c931a63e762fcaa9cb125b901c53b62403f, a431930c9bac518bf99d6b1da526a7f37ddee8d8 to < 966cb76fb2857a4242cab6ea2ea17acf818a3da7, e7d2dc2421e821e4045775e6dc226378328de6f6, fc7f732984ec91f30be3e574e0644066d07f2b78, eec522fd0d28106b14a59ab2d658605febe4a3bb, 5.10.241 to < 5.10.261, 5.15.190 to < 5.15.212, 6.1.149 to < 6.1.178, 6.6.103 to < 6.6.145, 6.12.43 to < 6.12.97, 5.4.297 to < 5.5, 6.15.11 to < 6.16, 6.16.2 to < 6.17, 6.17—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/c8dd112173c02adf539fe2ad34a45f5e0068780d
git.kernel.orghttps://git.kernel.org/stable/c/fc9d1447ca3cdc78d2e4ace1ce1f3a7c77ca08b1
git.kernel.orghttps://git.kernel.org/stable/c/671c3fcc2ad31c1311ea6414382a2d95104ae1b9
git.kernel.orghttps://git.kernel.org/stable/c/b6a481642ea1977be2f84dc08c5affd742c177e7
git.kernel.orghttps://git.kernel.org/stable/c/7399c3baee7bb622a92f0b895cd4d3009a693f2b
git.kernel.orghttps://git.kernel.org/stable/c/607217f7ad419b53926f71e3f75001813bbc08ad
git.kernel.orghttps://git.kernel.org/stable/c/c25d3c931a63e762fcaa9cb125b901c53b62403f
git.kernel.orghttps://git.kernel.org/stable/c/966cb76fb2857a4242cab6ea2ea17acf818a3da7

01 Record index

CVE-2026-64361

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-64361

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References