CVE-2025-68767

Not scored yetLast modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

hfsplus: Verify inode mode when loading from disk

syzbot is reporting that S_IFMT bits of inode->i_mode can become bogus when the S_IFMT bits of the 16bits "mode" field loaded from disk are corrupted.

According to [1], the permissions field was treated as reserved in Mac OS 8 and 9. According to [2], the reserved field was explicitly initialized with 0, and that field must remain 0 as long as reserved. Therefore, when the "mode" field is not 0 (i.e. no longer reserved), the file must be S_IFDIR if dir == 1, and the file must be one of S_IFREG/S_IFLNK/S_IFCHR/ S_IFBLK/S_IFIFO/S_IFSOCK if dir == 0.

Metrics

No CVSS score has been published yet.

Affected software

VendorProductVersions
LinuxLinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 6f768724aabd5b321c5b8f15acdca11e4781cf32; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < d92333c7a35856e419500e7eed72dac1afa404a5; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 001f44982587ad462b3002ee40c75e8df67d597d; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 05ec9af3cc430683c97f76027e1c55ac6fd25c59; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < edfb2e602b5ba5ca6bf31cbac20b366efb72b156; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 91f114bffa36ce56d0e1f60a0a44fc09baaefc79; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 005d4b0d33f6b4a23d382b7930f7a96b95b01f39
LinuxLinux2.6.12

References

Timeline

Published
Jan 13, 2026
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-68768In the Linux kernel, the following vulnerability has been resolved: inet: frags: flush pending skbs in fqdir_pre_exit() We have been seeinCVE-2025-68769In the Linux kernel, the following vulnerability has been resolved: f2fs: fix return value of f2fs_recover_fsync_data() With below scriptsCVE-2025-68778.8A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This affects an unknown paCVE-2025-687707.5In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix XDP_TX path For XDP_TX action in bnxt_rx_xdp(), clearing CVE-2025-68771In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix kernel BUG in ocfs2_find_victim_chain syzbot reported a kerCVE-2025-68772In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid updating compression context during writeback Bai, CVE-2025-68773In the Linux kernel, the following vulnerability has been resolved: spi: fsl-cpm: Check length parity before switching to 16 bit mode CommCVE-2025-687747.5In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create When sync()CVE-2025-687759.8In the Linux kernel, the following vulnerability has been resolved: net/handshake: duplicate handshake cancellations leak socket When a haCVE-2025-68776In the Linux kernel, the following vulnerability has been resolved: net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() prp_CVE-2025-68777In the Linux kernel, the following vulnerability has been resolved: Input: ti_am335x_tsc - fix off-by-one error in wire_order validation TCVE-2025-68778In the Linux kernel, the following vulnerability has been resolved: btrfs: don't log conflicting inode if it's a dir moved in the current t
CVE-2025-68767: Unscored | Vulnix