Linux Kernel Vulnerability in HFS File System from Developer's Reference

CVE-2023-53862

What is CVE-2023-53862?

A reference counting issue has been identified in the HFS file system of the Linux kernel, leading to a potential kernel BUG. The problem originates from the hfs_bnode_put function, where a missing invocation of hfs_bnode_get results in an unexpected reference count of zero. This occurs in scenarios involving HFS node creation and writing operations, potentially triggering a panic state. Proper management of reference counts is essential in preventing such critical failures during filesystem operations.

References