Junglewise Threat Intelligence

CVE-2025-68774: Linux Kernel race condition in HFS+ __hfs_bnode_create

CVE-2025-68774 · Severity: high · CVSS 7.5 · Published 2026-01-13

Technologies: Linux Kernel. Vendors: Linux.

Executive brief

A vulnerability exists in the Linux kernel's HFS+ file system driver, which is used to read and write disks formatted for Apple computers. When certain file operations occur simultaneously, the system can mishandle internal memory tracking, leading to a kernel crash. This could result in a complete system shutdown or loss of availability for services relying on the affected machine.

Technical details

A race condition exists in the HFS+ implementation within 'fs/hfsplus/bnode.c'. When 'sync()' and 'link()' are called concurrently, multiple threads may enter '__hfs_bnode_create' for the same node. If one thread creates and hashes a node while another thread finds the already-hashed node, the second thread fails to increment the reference count via 'hfs_bnode_get()'. This results in an underflow when the nodes are later released, triggering a 'BUG_ON' and subsequent kernel panic. The issue has been patched by ensuring 'hfs_bnode_get()' is called when reusing a bnode newly created by another thread.

Affected products

  • Linux Linux Kernel 2.6.12 to 6.12.y

Timeline

  • 2025-08-29: disclosed: Initial patch submission
  • 2026-01-13: advisory: CVE published
  • 2026-01-19: patched: Backported to stable branches

References

Related threats