CVE-2026-63808

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the exfat find dir entry() function. The problem occurs when a buffer head obtained from exfat get dentry() is released using brelse(bh) before the TYPE EXTEND branch reads the directory entry via the ep pointer, which points to bh->b data. Because the reference is dropped prematurely, the underlying page backing bh->b data may no longer be valid when exfat extract uni name() is called, leading to a potential kernel fault.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.