« Volver al listado

CVE-2026-74414

Estado: RecibidaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

hfsplus: Remove the duplicate attr inode dirty marking action

Syzbot reported a null-ptr-deref in [1]. If the attributes file is not loaded during system mount, a trigger occurs [1] when setxattr is executed in userspace.

Remove the first mark attr inode dirty operation.

Detalles técnicos trazas, registros y código del informe original
[1]
KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
Call Trace:
 hfsplus_setxattr+0x124/0x340 fs/hfsplus/xattr.c:555
 hfsplus_trusted_setxattr+0x40/0x60 fs/hfsplus/xattr_trusted.c:30
 __vfs_setxattr+0x43c/0x480 fs/xattr.c:218
 __vfs_setxattr_noperm+0x12d/0x660 fs/xattr.c:252
 vfs_setxattr+0x163/0x360 fs/xattr.c:339
 do_setxattr fs/xattr.c:654 [inline]

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-74414",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "ee8422d00b7cfa028823ebf1f28bf9dea428cac3",
              "lessThan": "b3c7ccb1a93cbb5a9a13196abf608ffa2516817e",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "ee8422d00b7cfa028823ebf1f28bf9dea428cac3",
              "lessThan": "7a41fd2b32e5908f19a68732008d581c167279dd",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "fs/hfsplus/xattr.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "7.1"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "7.1",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "7.1.5",
              "versionType": "semver",
              "lessThanOrEqual": "7.1.*"
            },
            {
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "fs/hfsplus/xattr.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-08-15T06:22:43.507",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/7a41fd2b32e5908f19a68732008d581c167279dd",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/b3c7ccb1a93cbb5a9a13196abf608ffa2516817e",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nhfsplus: Remove the duplicate attr inode dirty marking action\n\nSyzbot reported a null-ptr-deref in [1].\nIf the attributes file is not loaded during system mount, a trigger\noccurs [1] when setxattr is executed in userspace.\n\nRemove the first mark attr inode dirty operation.\n\n[1]\nKASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]\nCall Trace:\n hfsplus_setxattr+0x124/0x340 fs/hfsplus/xattr.c:555\n hfsplus_trusted_setxattr+0x40/0x60 fs/hfsplus/xattr_trusted.c:30\n __vfs_setxattr+0x43c/0x480 fs/xattr.c:218\n __vfs_setxattr_noperm+0x12d/0x660 fs/xattr.c:252\n vfs_setxattr+0x163/0x360 fs/xattr.c:339\n do_setxattr fs/xattr.c:654 [inline]"
    }
  ],
  "lastModified": "2026-08-17T06:19:36.900",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}