CVE-2009-4020: Linux Kernel

High severity, CVSS 7.8. EPSS: 4.8% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.

Affected products

• Linux Linux Kernel: version 2.6.32 only

Published 2009-12-04. Last modified 2026-06-16.