AZL-74315
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-74315.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-74315
- Upstream
- Published
- 2026-01-13T16:15:56Z
- Modified
- 2026-04-01T05:22:22.551429Z
- Summary
- CVE-2025-68767 affecting package kernel for versions less than 6.6.121.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
hfsplus: Verify inode mode when loading from disk
syzbot is reporting that SIFMT bits of inode->imode can become bogus when the S_IFMT bits of the 16bits "mode" field loaded from disk are corrupted.
According to [1], the permissions field was treated as reserved in Mac OS 8 and 9. According to [2], the reserved field was explicitly initialized with 0, and that field must remain 0 as long as reserved. Therefore, when the "mode" field is not 0 (i.e. no longer reserved), the file must be SIFDIR if dir == 1, and the file must be one of SIFREG/SIFLNK/SIFCHR/ SIFBLK/SIFIFO/S_IFSOCK if dir == 0.
- References