Medium 5.5Published Jun 24, 2026

CVE-2026-53023fs/ntfs3: terminate the cached volume label after UTF-8 conversion

Updated under an hour ago (Oct 29, 2026, 1:30 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: terminate the cached volume label after UTF-8 conversion ntfs_fill_super() loads the on-disk volume label with utf16s_to_utf8s() and stores the result in sbi->volume.label. The converted label is later exposed through ntfs3_label_show() using %s, but utf16s_to_utf8s() only returns the number of bytes written and does not add a trailing NUL. If the converted label fills the entire fixed buffer, ntfs3_label_show() can read past the end of sbi->volume.label while looking for a terminator. Terminate the cached label explicitly after a successful conversion and clamp the exact-full case to the last byte of the buffer.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Jun 24, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	82cae269cfa953032fbb8980a7d554d60fb00b17 builds before 32b0686369e0afbb3549a0d93e2d8517da84cd30; from 82cae269cfa953032fbb8980a7d554d60fb00b17 before bc7a0c34c4ca259cfddf3bc18fc5b3c6411d26ed; 82cae269cfa953032fbb8980a7d554d60fb00b17 builds before 0b11fcbe80a59acdf58337d80ebb5f72201d73d6; 82cae269cfa953032fbb8980a7d554d60fb00b17 builds before 54d564b762389679e2f8fb9eeb20af7e82371e1c; from 82cae269cfa953032fbb8980a7d554d60fb00b17 before 6136bbb054f7ab9f51ae99915541633b18bcef90; 82cae269cfa953032fbb8980a7d554d60fb00b17 builds before 5cd0707b81cb4589f00aec5c4c1288bd0980d2a4; from 82cae269cfa953032fbb8980a7d554d60fb00b17 before a6cd43fe9b083fa23fe1595666d5738856cb261a	CNA record
linux linux_kernel linux:linux_kernel	from 5.15 before 5.15.209; from 5.16 before 6.1.175; from 6.2 before 6.6.141; from 6.7 before 6.12.91; from 6.13 before 6.18.33; from 6.19 before 7.0.10	NVD

References

References

https://git.kernel.org/stable/c/32b0686369e0afbb3549a0d93e2d8517da84cd30	patch
https://git.kernel.org/stable/c/bc7a0c34c4ca259cfddf3bc18fc5b3c6411d26ed	patch
https://git.kernel.org/stable/c/0b11fcbe80a59acdf58337d80ebb5f72201d73d6	patch
https://git.kernel.org/stable/c/54d564b762389679e2f8fb9eeb20af7e82371e1c	patch
https://git.kernel.org/stable/c/6136bbb054f7ab9f51ae99915541633b18bcef90	patch
https://git.kernel.org/stable/c/5cd0707b81cb4589f00aec5c4c1288bd0980d2a4	patch
https://git.kernel.org/stable/c/a6cd43fe9b083fa23fe1595666d5738856cb261a	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.