A buffer over-read occurs when the Linux kernel mounts a corrupted HFS+ image. A malformed node_size of 1 passed to hfs_bnode_find causes the function to read beyond the expected size and return an uninitialized value, which may lead to a kernel crash or memory corruption. The flaw involves uninitialized data (CWE‑457).

Linux kernels that contain the hfsplus driver but have not applied the patch adding a sanity check for btree node size are affected. The patch referenced in the available commits implements the check, so any kernel version prior to that commit is potentially vulnerable. No specific affected kernel versions are provided in the CVE data.

The CVSS score is not supplied, and EPSS is not available, so the exact risk level cannot be quantified. Based on the description, the attack requires the ability to mount an HFS+ filesystem, which typically requires privileged local access (root or CAP_SYS_ADMIN). The likely attack vector is a locally‑privileged user creating or supplying a malformed HFS+ image that includes an invalid node_size value during mount. Inferred from the description, this could cause a denial of service by crashing the kernel, but external remote exploitation is not indicated.