CVE-2026-97362

Name of the Vulnerable Software and Affected Versions HFS2 versions prior to 2.4.1

Description An unauthenticated attacker can cause a complete and persistent loss of availability by sending a single crafted request. This action triggers a hung serving thread that enters a busy loop, rendering the entire file server unresponsive to all clients. The system does not self-recover, requiring a manual restart of the service by an operator to restore functionality.

Recommendations Update HFS2 to a version later than 2.4.0.