CVE-2025-68767: hfsplus: Verify inode mode when loading from disk
Published Jan 13, 2026
·Updated
hfsplus: Verify inode mode when loading from disk
Affected Software
3 affected componentsFixes available
Linux Linux kernel
Microsoft azl3 kernel 6.6.119.3-3
debian/linux
6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Jan 13, 2026
CVE Published
via MITRE·03:28 PM
Data Sourced
via MITRE·03:28 PM
Description
Data Sourced
via NVD·04:15 PM
Description
Jan 15, 2026
Data Sourced
via Microsoft·09:01 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-68767?
CVE-2025-68767 is considered to be of medium severity due to potential unauthorized access issues.
2
How do I fix CVE-2025-68767?
To fix CVE-2025-68767, update the Linux kernel to the latest patched version provided by your distribution.
3
What systems are affected by CVE-2025-68767?
CVE-2025-68767 affects the Linux kernel, particularly systems using hfsplus file systems.
4
What happens if CVE-2025-68767 is exploited?
If exploited, CVE-2025-68767 can lead to incorrect mode values in inode structures, potentially causing security vulnerabilities.
5
Is CVE-2025-68767 a remote exploit?
CVE-2025-68767 is not classified as a remote exploit but rather a local privilege escalation vulnerability.