CVE-2026-45960

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A reference count inconsistency occurs in the hfsplus module when the hfs bnode create() function identifies that a node is already hashed. Instead of incrementing the reference count, the function returns the existing node, which leads to a kernel panic when the node is subsequently freed by the hfs bnode put() function. This situation can be triggered by filesystem corruption or when hfs bmap alloc() attempts to allocate a node that is already in use, such as when the bitmap bit for node 0 is incorrectly unset.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.