PT-2026-61126 · Linux+1 · Linux Kernel+1

CVE-2026-63810

·

Published

2026-05-26

·

Updated

2026-09-07

CVSS v2.0

4.6

Medium

VectorAV:L/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the bdev pseudo-filesystem, an internal kernel filesystem that should not be accessible to userspace. A kernel NULL pointer dereference occurs when userspace attempts to mount this filesystem and access files. This happens because the move mount() system call utilizes pointers from the inode operations structure, which are set to 0 for the bdev pseudo-filesystem via inode->i op = &empty iops;.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

AZL-92531
BDU:2026-14393
CVE-2026-63810
OPENSUSE-SU-2026:11339-1
USN-8726-1
USN-8727-1
USN-8728-1

Affected Products

Linux Kernel
Ubuntu