CVE-2026-63793 | In the Linux kernel, the following vulnerability has been re… | CVSS 7.8 HIGH

Description

In the Linux kernel, the following vulnerability has been resolved: ntfs: serialize volume label accesses Protect vol->volume_label with a mutex and snaphost the label before copy_to_user. This prevent a use-after-free when FS_IOC_SETFSLABEL replaces the vol->volume_label and FS_IOC_GETTSLABEL reads it concurrently.

Metadata

CVE ID: CVE-2026-63793
State: PUBLISHED
Assigner: Linux
Reserved: 2026-07-19 07:54 UTC
Published: 2026-07-19 12:02 UTC
Last updated: 2026-07-20 13:40 UTC
Vendor / Product: Linux / Linux
Sources: cve.org · NVD

Severity & Metrics

7.8 HIGH CVSS 3.1

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products (2)

Vendor	Product	Platform	Versions
Linux	Linux	—	9c87959601e80b39a45250e362e6ddfec17cb0fa < acd744019460bad22e43d4569a502f9c88d331ae, 9c87959601e80b39a45250e362e6ddfec17cb0fa < e9e50ce4f13dc721014af622613409455c734942
Linux	Linux	—	7.1, 0 < 7.1, 7.1.3 ≤ 7.1., 7.2-rc1 ≤

CVSS scores (1)

Score	Severity	Version	Source	Vector
7.8	HIGH	3.1	cna	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References (2)