CVE Explorer

CVE-2026-46299

In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix held lock freed on hfsplus_fill_super() hfsplus_fill_super() calls hfs_find_init() to initialize a search structure, which acquires tree->tree_lock. If the subsequent call to hfsplus_cat_build_key() fails, the function jumps to the out_put_root error label without releasing the lock. The later cleanup path then frees the tree data structure with the lock still held, triggering a held lock freed warning. Fix this

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:b8a70f3d3a455ab55af20fd86ee36c2d377492047f72cb49eb87d96d5c776d2c

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/hfsplus/super.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"e890656accee4c26d932ea388eb8936a6e22184d","status":"affected","version":"89ac9b4d3d1a049ae1054f99b1aed81092cd0a82","versionType":"git"},{"lessThan":"6499c9c8ec437a369e7e221dad91f6122b50759d","status":"affected","version":"89ac9b4d3d1a049ae1054f99b1aed81092cd0a82","versionType":"git"},{"lessThan":"c554ddc87af4d4e4be42f8aed1baec9e1c7588e0","status":"affected","version":"89ac9b4d3d1a049ae1054f99b1a…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:69ab0565260275d74e6181ae4b905c3d81816256531a534e14b7098cf638fa94 · sha256:a0bd47b626e2ea8b… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/hfsplus/super.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.19"},{"lessThan":"3.19","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","versionType":"semver"},{"lessThanOr…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:69ab0565260275d74e6181ae4b905c3d81816256531a534e14b7098cf638fa94 · sha256:a0bd47b626e2ea8b… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:69ab0565260275d74e6181ae4b905c3d81816256531a534e14b7098cf638fa94 · sha256:a0bd47b626e2ea8b… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:69ab0565260275d74e6181ae4b905c3d81816256531a534e14b7098cf638fa94 · sha256:a0bd47b626e2ea8b… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion

{"metric":{"baseScore":7,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:69ab0565260275d74e6181ae4b905c3d81816256531a534e14b7098cf638fa94 · sha256:a0bd47b626e2ea8b… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/041acda6d9f96006703466449c10c9a69590c8b9"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:69ab0565260275d74e6181ae4b905c3d81816256531a534e14b7098cf638fa94 · sha256:a0bd47b626e2ea8b… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/3ca80e3012c8be85b4f8d0d20eac8d3b17ff257e"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:69ab0565260275d74e6181ae4b905c3d81816256531a534e14b7098cf638fa94 · sha256:a0bd47b626e2ea8b… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/6499c9c8ec437a369e7e221dad91f6122b50759d"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:69ab0565260275d74e6181ae4b905c3d81816256531a534e14b7098cf638fa94 · sha256:a0bd47b626e2ea8b… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/90c500e4fd83fa33c09bc7ee23b6d9cc487ac733"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:69ab0565260275d74e6181ae4b905c3d81816256531a534e14b7098cf638fa94 · sha256:a0bd47b626e2ea8b… · /containers/cna/references/7

{"url":"https://git.kernel.org/stable/c/bfbcce6a7b0552a390620d9b2c4d2bcb1825cbdc"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:69ab0565260275d74e6181ae4b905c3d81816256531a534e14b7098cf638fa94 · sha256:a0bd47b626e2ea8b… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/c554ddc87af4d4e4be42f8aed1baec9e1c7588e0"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:69ab0565260275d74e6181ae4b905c3d81816256531a534e14b7098cf638fa94 · sha256:a0bd47b626e2ea8b… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/d309d3308de658d87c42d97e044c89a226327526"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:69ab0565260275d74e6181ae4b905c3d81816256531a534e14b7098cf638fa94 · sha256:a0bd47b626e2ea8b… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/e890656accee4c26d932ea388eb8936a6e22184d"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:69ab0565260275d74e6181ae4b905c3d81816256531a534e14b7098cf638fa94 · sha256:a0bd47b626e2ea8b… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer