CVE-2026-63793: Linux Kernel
High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.
In the Linux kernel, the following vulnerability has been resolved: ntfs: serialize volume label accesses Protect vol->volume_label with a mutex and snaphost the label before copy_to_user. This prevent a use-after-free when FS_IOC_SETFSLABEL replaces the vol->volume_label and FS_IOC_GETTSLABEL reads it concurrently.
Affected products
- Linux Linux Kernel: from 7.1, before 7.1.3 (fixed in 7.1.3)
Published 2026-07-19. Last modified 2026-08-17.