CVE-2026-64360

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the hfs/hfsplus components where the hfs bnode read() function can return early without writing to the output buffer. This occurs when is bnode offset valid() fails or when check and correct requested length() corrects the length to zero. Callers such as hfs bnode read u16() and hfs bnode read u8() use stack-allocated buffers and process the results unconditionally, which can lead to KMSAN uninit-value reports. KMSAN (Kernel Memory Sanitizer) is a tool used to detect the use of uninitialized memory in the kernel.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.