PT-2026-51917 · Linux+2 · Linux Kernel+2
CVE-2026-53023
·
Published
2026-06-24
·
Updated
2026-09-07
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An issue exists in the NTFS3 file system where the
ntfs fill super() function loads the on-disk volume label using utf16s to utf8s() and stores it in sbi->volume.label. Because utf16s to utf8s() does not add a trailing NUL terminator, the ntfs3 label show() function may read past the end of the sbi->volume.label buffer when searching for a terminator if the converted label fills the entire fixed buffer.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu