Out-of-bounds write in Linux kernel - CVE-2026-93095
Published: September 18, 2026
Vulnerability identifier: #VU150918
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-93095
CWE-ID: CWE-787
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause an out-of-bounds write.
The vulnerability exists due to improper validation of catalog thread records in hfsplus_delete_cat() when rebuilding a catalog key from a corrupted HFS+ image. A local user can supply a corrupted HFS+ image with an oversized thread name length to cause an out-of-bounds write.
Affected software
Linux kernel
How to mitigate CVE-2026-93095
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
External References
- https://git.kernel.org/stable/c/33cda0036bc683fc888c20b04a5fc030e3e8413b
- https://git.kernel.org/stable/c/473ea7aa35615829f0de7a71e8691d69dc24e328
- https://git.kernel.org/stable/c/7898beee166c1145c0bca364d687b8437435bf1a
- https://git.kernel.org/stable/c/af48abc1b00d865c3f4c4d76b901c44115cb7162
- https://git.kernel.org/stable/c/b9729c51a8b67f8b20b8a8cf395da4be63a0c15b
- https://git.kernel.org/stable/c/e20f3b749ad241df77ec1c3e13a9c22209aa1eb3
- https://git.kernel.org/stable/c/e2ea5cac61acfc11dad22f1d2d4bc71d56c52a20
- https://git.kernel.org/stable/c/e31985c67ba00a59d9b1340af473c1dbe6c87856