Back to overview

CVE-2026-63793

Description
In the Linux kernel, the following vulnerability has been resolved: ntfs: serialize volume label accesses Protect vol->volume_label with a mutex and snaphost the label before copy_to_user. This prevent a use-after-free when FS_IOC_SETFSLABEL replaces the vol->volume_label and FS_IOC_GETTSLABEL reads it concurrently.

Metadata

CVE ID
CVE-2026-63793
State
PUBLISHED
Assigner
Linux
Reserved
2026-07-19 07:54 UTC
Published
2026-07-19 12:02 UTC
Last updated
2026-07-20 06:41 UTC
Vendor / Product
Linux / Linux
Sources
cve.org  ·  NVD

Severity & Metrics

No CVSS data available.

Affected products (2)
VendorProductPlatformVersions
Linux Linux — 9c87959601e80b39a45250e362e6ddfec17cb0fa < acd744019460bad22e43d4569a502f9c88d331ae, 9c87959601e80b39a45250e362e6ddfec17cb0fa < e9e50ce4f13dc721014af622613409455c734942
Linux Linux — 7.1, 0 < 7.1, 7.1.3 ≤ 7.1.*, 7.2-rc1 ≤ *
References (2)
Back to overview