---
id: CVE-2025-71271
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  hfsplus: ensure sb->s_fs_info is always cleaned up

  When hfsplus was converted to the new mount api a bug was introduced by
  changing the allocation pattern of sb->s_fs_…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  hfsplus: ensure sb->s_fs_info is always cleaned up

  When hfsplus was converted to the new mount api a bug was introduced by
  changing the allocation pattern of sb->s_fs_…
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 6.13, < 6.18.16'
  - 'linux_kernel >= 6.19, < 6.19.6'
patched:
  - linux_kernel 6.19.6
published: '2026-05-06'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T13:10:00.187'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-71271'
references:
  - url: 'https://git.kernel.org/stable/c/0bcfebb83b5460d5be4e5c9dfb19cdaf3d4cb1db'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/126fb0ce99431126b44a6c360192668c818f641f'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/1e38d32bb04d85a2c81204a85a34878a497128c8'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
epss: 0.00126
epssPercentile: 0.02042
ingestedAt: '2026-10-14T13:30:58.484Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

hfsplus: ensure sb->s_fs_info is always cleaned up

When hfsplus was converted to the new mount api a bug was introduced by
changing the allocation pattern of sb->s_fs_info. If setup_bdev_super()
fails after a new superblock has been allocated by sget_fc(), but before
hfsplus_fill_super() takes ownership of the filesystem-specific s_fs_info
data it was leaked.

Fix this by freeing sb->s_fs_info in hfsplus_kill_super().

## Affected

- `linux_kernel >= 6.13, < 6.18.16`
- `linux_kernel >= 6.19, < 6.19.6`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.19.6`