What is the CVSS score of CVE-2026-63793?

CVE-2026-63793 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Linux Kernel are affected by CVE-2026-63793?

Linux systems with NTFS filesystems face kernel-level vulnerabilities that could allow authenticated users to access sensitive system memory or cause service outages (CVE-2026-63793).. A patch is available.

How to fix or mitigate CVE-2026-63793?

Within 24 hours, audit all systems to identify Linux deployments with mounted NTFS filesystems and document current kernel versions. Within 7 days, begin staged patching of test and development systems to Linux kernel 7.1.3 or 7.2-rc1 to validate stability in your environment. Within 30 days, complete kernel updates across all production systems with NTFS mounts to ensure comprehensive remediation.

Linux Kernel CVE-2026-63793

EUVD-2026-45459 HIGH

Use After Free (CWE-416)

2026-07-19 Linux

GHSA-j6f5-rrpr-78g3

Information Disclosure Linux Use After Free Memory Corruption

7.8

CVSS 3.1 · Vendor: Linux

Severity by source

Vendor (Linux) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

6.3 MEDIUM

Local ioctl race requires timing precision (AC:H) and low-privileged access to an NTFS mount (PR:L); the UAF read leaks kernel memory (C:H) and can crash the kernel (A:H), with no demonstrated integrity impact (I:N).

3.1 AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H

4.0 AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N

SUSE

HIGH

qualitative

Primary rating from Vendor (Linux).

CVSS VectorVendor: Linux

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 20, 2026 - 15:30 vuln.today

CVSS changed

Jul 20, 2026 - 15:22 NVD

7.8 (HIGH)

Patch available

Jul 19, 2026 - 14:17 EUVD

CVE Published

Jul 19, 2026 - 12:02 cve.org

UNKNOWN (no severity yet)

CVE Published

Jul 19, 2026 - 12:02 cve.org

HIGH 7.8

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

ntfs: serialize volume label accesses

Protect vol->volume_label with a mutex and snaphost the label before copy_to_user. This prevent a use-after-free when FS_IOC_SETFSLABEL replaces the vol->volume_label and FS_IOC_GETTSLABEL reads it concurrently.

AnalysisAI

Local information disclosure and use-after-free in the Linux kernel NTFS filesystem driver lets a low-privileged local user read freed kernel memory by racing the FS_IOC_GETFSLABEL and FS_IOC_SETFSLABEL ioctls against a mounted NTFS volume. Because vol->volume_label is copied to userspace via copy_to_user without serialization, a concurrent SETFSLABEL that replaces the label can free the buffer mid-read, leaking kernel data or crashing the system. No public exploit is identified at time of analysis and it is not in CISA KEV; a vendor patch is available in Linux 7.1.3 and 7.2-rc1.

Technical ContextAI

The flaw is in the in-tree NTFS (ntfs3) filesystem driver, which exposes the volume label through the generic FS_IOC_GETFSLABEL/FS_IOC_SETFSLABEL ioctl interface. The root cause is a use-after-free (CWE-416) from unsynchronized concurrent access: FS_IOC_SETFSLABEL frees and replaces the vol->volume_label pointer while FS_IOC_GETFSLABEL simultaneously copies that same buffer to userspace via copy_to_user, with no lock guarding the shared state. The upstream fix adds a mutex to serialize access and snapshots the label locally before copy_to_user, closing the race window. The source feed marked CWE as N/A, but the described behavior is unambiguously a use-after-free (CWE-416) with an information-disclosure consequence.

RemediationAI

Vendor-released patch: upgrade the Linux kernel to 7.1.3 (or 7.2-rc1), or the fixed build shipped by your distribution, which serializes vol->volume_label access with a mutex and snapshots the label before copy_to_user; the fix corresponds to kernel.org commits e9e50ce4f13dc721014af622613409455c734942 and acd744019460bad22e43d4569a502f9c88d331ae (https://git.kernel.org/stable/c/e9e50ce4f13dc721014af622613409455c734942). Where immediate patching is not possible, the practical compensating control is to shrink the attack surface: avoid mounting untrusted NTFS volumes and restrict which users can invoke FS_IOC_SETFSLABEL on NTFS mounts, since label replacement is the trigger - the trade-off is loss of online label management for those users. Because exploitation requires local access, tightening access to hosts that mount NTFS (and disabling the ntfs3 driver where NTFS support is unused, at the cost of losing NTFS read/write) further reduces exposure until the patched kernel is deployed.

Same weakness CWE-416 – Use After Free

View all

CVE-2019-0708 CRITICAL POC

9.8

CVE-2015-5119 CRITICAL POC

9.8

CVE-2014-0322 HIGH POC

8.8

CVE-2012-4792 HIGH POC

8.8

CVE-2009-4324 HIGH POC

7.8

CVE-2015-0313 CRITICAL POC

9.8

CVE-2015-5122 CRITICAL POC

9.8

CVE-2013-2551 HIGH POC

8.8

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

Vendor StatusVendor

SUSE

Severity: Important

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 16.0	Not-Affected

CVE-2026-63793 vulnerability details – vuln.today

Back

Linux Kernel CVE-2026-63793

Severity by source

CVSS VectorVendor: Linux

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

Same weakness CWE-416 – Use After Free

Same technique Information Disclosure

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code