The vulnerability in the Linux kernel affects the HFS/HFS+ filesystem code, specifically in the check_and_correct_requested_length() function. This function performs a bounds check by adding two 32-bit unsigned integers (offset and length) and comparing the result against node_size. If the length value is large due to an underflow (e.g., from a subtraction in hfs_brec_remove()), the addition can overflow and wrap around, causing the bounds check to incorrectly pass. This allows a subsequent memmove operation to read memory approximately 4GB past the intended buffer boundary. The issue was fixed by widening the addition to 64-bit arithmetic before the comparison, preventing the overflow and maintaining correct bounds checking.

The vulnerability can cause out-of-bounds memory reads in the kernel's HFS/HFS+ filesystem code, potentially leading to memory corruption or information disclosure. The exact impact is limited to the affected function and does not specify privilege escalation or remote exploitation. No known exploits in the wild have been reported.

A fix has been implemented in the Linux kernel by changing the arithmetic in check_and_correct_requested_length() from 32-bit to 64-bit to prevent overflow. Since no patch links or vendor advisories are provided, check the official Linux kernel repositories or vendor advisories for the fixed version and apply the update accordingly. Patch status is not yet confirmed in this data — verify with the vendor advisory for current remediation guidance.