PT-2026-51917 · Linux+2 · Linux Kernel+2

CVE-2026-53023

·

Published

2026-06-24

·

Updated

2026-09-07

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the NTFS3 file system where the ntfs fill super() function loads the on-disk volume label using utf16s to utf8s() and stores it in sbi->volume.label. Because utf16s to utf8s() does not add a trailing NUL terminator, the ntfs3 label show() function may read past the end of the sbi->volume.label buffer when searching for a terminator if the converted label fills the entire fixed buffer.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-53023
ECHO-98BB-B502-5230
OESA-2026-3532
USN-8566-1
USN-8567-1
USN-8568-1
USN-8569-1
USN-8574-1
USN-8574-2
USN-8574-3
USN-8575-1
USN-8575-2
USN-8575-3
USN-8576-1
USN-8576-2
USN-8593-1
USN-8595-1
USN-8595-2
USN-8595-3
USN-8596-1
USN-8603-1
USN-8606-1
USN-8607-1
USN-8608-1
USN-8609-1
USN-8610-1
USN-8618-1
USN-8619-1
USN-8620-1
USN-8620-2
USN-8620-3
USN-8620-4
USN-8663-1
USN-8664-1
USN-8665-1
USN-8668-1
USN-8728-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu