CVE-2026-63793
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
In the Linux kernel, the following vulnerability has been resolved:
ntfs: serialize volume label accesses
Protect vol->volume_label with a mutex and snaphost the label before copy_to_user. This prevent a use-after-free when FS_IOC_SETFSLABEL replaces the vol->volume_label and FS_IOC_GETTSLABEL reads it concurrently.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 9c87959601e80b39a45250e362e6ddfec17cb0fa < acd744019460bad22e43d4569a502f9c88d331ae | affected |
| Linux | Linux | 9c87959601e80b39a45250e362e6ddfec17cb0fa < e9e50ce4f13dc721014af622613409455c734942 | affected |
| Linux | Linux | 7.1 | affected |
| Linux | Linux | 0 < 7.1 | unaffected |
| Linux | Linux | 7.1.3 <= 7.1.* | unaffected |
| Linux | Linux | 7.2-rc1 <= * | unaffected |
Weaknesses
References
- https://git.kernel.org/stable/c/acd744019460bad22e43d4569a502f9c88d331ae
- https://git.kernel.org/stable/c/e9e50ce4f13dc721014af622613409455c734942
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.