CVE-2026-80656

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An uninitialized value bug exists in the hfsplus module during the file system mounting process. When loading the catalog from a corrupted HFS+ image, a corrupted node size value of 1 can cause the rec off argument passed to the hfs bnode read u16() function (within hfs bnode find()) to become excessively large. This prevents the function from returning a valid value to initialize the off variable. According to technical specifications, the node size must be a power of two between 512 and 32,768 bytes, inclusive.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.