PT-2026-37608 · Linux · Linux Kernel

Published 2026-05-06 · Updated 2026-05-08 · CVE-2026-43268

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the hfsplus file system where special inodes are not correctly identified. Following a change in the virtual file system (VFS) that requires inodes to be one of several specific types (S IFDIR, S IFLNK, S IFREG, S IFCHR, S IFBLK, S IFIFO, or S IFSOCK), special inodes must be treated as regular files using S IFREG to ensure compatibility.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-43268

Affected Products

Linux Kernel

References · 18

• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43268 · Vendor Advisory
• https://git.kernel.org/stable/c/ed8889ca21b6ab37bc1435c4009ce37a79acb9e6 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43268 · Vendor Advisory
• https://git.kernel.org/stable/c/67407d6abc9520a8a4661285b3ed294eb73ff6e7 · Patch
• https://git.kernel.org/stable/c/de9affb698d5034888314880736925c39d6d048e · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-43268 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-43268 · Security Note
• https://ubuntu.com/security/CVE-2026-43268 · Vendor Advisory
• https://git.kernel.org/stable/c/dcac5582f90b55a267d89769073c5651990b2ec5 · Patch
• https://git.kernel.org/stable/c/676bc99d0b3e356cdfec5d8204518e1aac14ec84 · Patch
• https://git.kernel.org/stable/c/799c492a619a10322543d13e6d2a6d27335c868c · Patch
• https://git.kernel.org/stable/c/9353d4ee26dc33f6ada1646e84660f4c59189763 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43268 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-43268 · Vendor Advisory
• https://git.kernel.org/stable/c/d209ebaee93fc5089101d34d1b38a91d7abb03fd · Patch