SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-63793

HIGH · CVSS 7.8 EPSS 0.12%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

The Linux kernel is vulnerable to a use-after-free condition in the NTFS file system, specifically during concurrent access to volume labels. This flaw can lead to potential data corruption or unauthorized access to sensitive information. Organizations using Linux systems, particularly those relying on NTFS file systems, should prioritize applying the patch to mitigate the risk.

CVE
CVE-2026-63793
Severity
HIGH
CVSS
7.8
EPSS
0.12%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ntfs: serialize volume label accesses Protect vol->volume_label with a mutex and snaphost the label before copy_to_user. This prevent a use-after-free when FS_IOC_SETFSLABEL replaces the vol->volume_label and FS_IOC_GETTSLABEL reads it concurrently.

Related CVEs

Other vulnerabilities affecting the same vendor(s)