Description
In the Linux kernel, the following vulnerability has been resolved:

ntfs: serialize volume label accesses

Protect vol->volume_label with a mutex and snaphost the label before
copy_to_user. This prevent a use-after-free when FS_IOC_SETFSLABEL
replaces the vol->volume_label and FS_IOC_GETTSLABEL reads it
concurrently.
Published: 2026-07-19
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A race condition in the Linux NTFS driver allows a concurrent FS_IOC_SETFSLABEL operation to replace an in‑memory volume_label while FS_IOC_GETTSLABEL simultaneously reads it, resulting in a use‑after‑free and memory corruption. If an attacker can trigger the race, the corrupted memory could be reused to execute arbitrary code or cause a kernel crash, leading to denial of service. This weakness matches CWE‑367.

Affected Systems

All Linux kernels containing the NTFS driver and not yet patched with the mutex protection on vol->volume_label are impacted. The vulnerability applies to every Linux installation that uses the NTFS module, across all distributions, without a specified version range in the advisory.

Risk and Exploitability

The CVSS score of 7.8 classifies the flaw as high severity. The EPSS score of <1% indicates the likelihood of exploitation is currently low. The vulnerability is not listed in CISA KEV. Based on the description, local or privileged users may trigger the race by invoking the two ioctl interfaces concurrently. Without mitigation, memory corruption could result in arbitrary code execution or a system crash.

Generated by OpenCVE AI on July 30, 2026 at 22:23 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the Linux kernel to a release that includes the mutex protection for vol->volume_label, which removes the race condition.
  • If an immediate kernel upgrade is not possible, temporarily unload or disable the NTFS module or unmount NTFS volumes until the patch is applied.
  • Restrict the use of FS_IOC_SETFSLABEL and FS_IOC_GETTSLABEL to privileged users only, limiting the opportunity for an attacker to trigger the race condition.

Generated by OpenCVE AI on July 30, 2026 at 22:23 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 21 Jul 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-367
References

Mon, 20 Jul 2026 14:45:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Sun, 19 Jul 2026 12:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ntfs: serialize volume label accesses Protect vol->volume_label with a mutex and snaphost the label before copy_to_user. This prevent a use-after-free when FS_IOC_SETFSLABEL replaces the vol->volume_label and FS_IOC_GETTSLABEL reads it concurrently.
Title ntfs: serialize volume label accesses
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-05T12:35:43.033Z

Reserved: 2026-07-19T07:54:57.012Z

Link: CVE-2026-63793

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

Severity :

Publid Date: 2026-07-19T00:00:00Z

Links: CVE-2026-63793 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-07-30T22:30:06Z

Weaknesses
  • CWE-367

    Time-of-check Time-of-use (TOCTOU) Race Condition