--- id: CVE-2026-43228 title: |- In the Linux kernel, the following vulnerability has been resolved: hfs: Replace BUG_ON with error handling for CNID count checks In a06ec283e125 next_id, folder_count, and file_count in the super block info were expanded to 64 bits, a… summary: |- In the Linux kernel, the following vulnerability has been resolved: hfs: Replace BUG_ON with error handling for CNID count checks In a06ec283e125 next_id, folder_count, and file_count in the super block info were expanded to 64 bits, a… severity: medium cvss: 5.5 cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H' cwe: - CWE-617 vendor: linux product: linux_kernel affected: - 'linux_kernel >= 6.18, < 6.19.6' patched: - linux_kernel 6.19.6 published: '2026-05-06' updated: '2026-10-15' sourceUpdated: '2026-10-15T11:17:30.447' source: NVD sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-43228' references: - url: 'https://git.kernel.org/stable/c/559f856b109c45844816a1693e259f93d3556c61' label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 - url: 'https://git.kernel.org/stable/c/b226804532a875c10276168dc55ce752944096bd' label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 - url: 'https://git.kernel.org/stable/c/b6536c1ced315fa645576d3a39c6e07f2a472962' label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 tags: - nvd - cve.org epss: 0.00143 epssPercentile: 0.03218 ingestedAt: '2026-10-15T11:00:41.712Z' --- ## Overview In the Linux kernel, the following vulnerability has been resolved: hfs: Replace BUG_ON with error handling for CNID count checks In a06ec283e125 next_id, folder_count, and file_count in the super block info were expanded to 64 bits, and BUG_ONs were added to detect overflow. This triggered an error reported by syzbot: if the MDB is corrupted, the BUG_ON is triggered. This patch replaces this mechanism with proper error handling and resolves the syzbot reported bug. Singed-off-by: Jori Koolstra ## Affected - `linux_kernel >= 6.18, < 6.19.6` ## Remediation Upgrade past the affected range: - `linux_kernel 6.19.6`