Answer in brief
CVE-2024-41059 records a High severity (CVSS 7.8) vulnerability in hfsplus: fix uninit-value in copy_name. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 7.8. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=017f8da43e92ddd9989884720b694a512e09ccce <72805debec8f7aa342da194fe0ed7bc8febea335 || >=017f8da43e92ddd9989884720b694a512e09ccce <c733e24a61cbcff10f660041d6d84d32bb7e4cb4 || >=017f8da43e92ddd9989884720b694a512e09ccce <34f8efd2743f2d961e92e8e994de4c7a2f9e74a0 || >=017f8da43e92ddd9989884720b694a512e09ccce <d02d8c1dacafb28930c39e16d48e40bb6e4cbc70 || >=017f8da43e92ddd9989884720b694a512e09ccce <22999936b91ba545ce1fbbecae6895127945e91c || >=017f8da43e92ddd9989884720b694a512e09ccce <f08956d8e0f80fd0d4ad84ec917302bb2f3a9c6a || >=017f8da43e92ddd9989884720b694a512e09ccce <ad57dc2caf1e0a3c0a9904400fae7afbc9f74bb2 || >=017f8da43e92ddd9989884720b694a512e09ccce <0570730c16307a72f8241df12363f76600baf57d | 72805debec8f7aa342da194fe0ed7bc8febea335, c733e24a61cbcff10f660041d6d84d32bb7e4cb4, 34f8efd2743f2d961e92e8e994de4c7a2f9e74a0, d02d8c1dacafb28930c39e16d48e40bb6e4cbc70, 22999936b91ba545ce1fbbecae6895127945e91c, f08956d8e0f80fd0d4ad84ec917302bb2f3a9c6a, ad57dc2caf1e0a3c0a9904400fae7afbc9f74bb2, 0570730c16307a72f8241df12363f76600baf57d |
| Linux/Linuxgeneric | 3.16 | Not reported |
Published upstream
Jul 29, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix uninit-value in copy_name [syzbot reported] BUG: KMSAN: uninit-value in sized_strscpy+0xc4/0x160 sized_strscpy+0xc4/0x160 copy_name+0x2af/0x320 fs/hfsplus/xattr.c:411 hfsplus_listxattr+0x11e9/0x1a50 fs/hfsplus/xattr.c:750 vfs_listxattr fs/xattr.c:493 [inline] listxattr+0x1f3/0x6b0 fs/xattr.c:840 path_listxattr fs/xattr.c:864 [inline] __do_sys_listxattr fs/xattr.c:876 [inline] __se_sys_listxattr fs/xattr.c:873 [inline] __x64_sys_listxattr+0x16b/0x2f0 fs/xattr.c:873 x64_sys_call+0x2ba0/0x3b50 arch/x86/include/generated/asm/syscalls_64.h:195 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was created at: slab_post_alloc_hook mm/slub.c:3877 [inline] slab_alloc_node mm/slub.c:3918 [inline] kmalloc_trace+0x57b/0xbe0 mm/slub.c:4065 kmalloc include/linux/slab.h:628 [inline] hfsplus_listxattr+0x4cc/0x1a50 fs/hfsplus/xattr.c:699 vfs_listxattr fs/xattr.c:493 [inline] listxattr+0x1f3/0x6b0 fs/xattr.c:840 path_listxattr fs/xattr.c:864 [inline] __do_sys_listxattr fs/xattr.c:876 [inline] __se_sys_listxattr fs/xattr.c:873 [inline] __x64_sys_listxattr+0x16b/0x2f0 fs/xattr.c:873 x64_sys_call+0x2ba0/0x3b50 arch/x86/include/generated/asm/syscalls_64.h:195 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f [Fix] When allocating memory to strbuf, initialize memory to 0.
Quoted source text, attributed separately from HOL analysis.