CVE-2026-53023

fs/ntfs3: terminate the cached volume label after UTF-8 conversion

published June 24, 2026

CVSS
—
EPSS
0%
Percentile
5.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: terminate the cached volume label after UTF-8 conversion

ntfs_fill_super() loads the on-disk volume label with utf16s_to_utf8s()

and stores the result in sbi->volume.label. The converted label is later

exposed through ntfs3_label_show() using %s, but utf16s_to_utf8s() only

returns the number of bytes written and does not add a trailing NUL.

If the converted label fills the entire fixed buffer,

ntfs3_label_show() can read past the end of sbi->volume.label while

looking for a terminator.

Terminate the cached label explicitly after a successful conversion and

clamp the exact-full case to the last byte of the buffer.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.1th percentile
Published
2026-06-24T16:29Z
EPSS history
Timeline
  • 24 JUN 16:29Z
    fs/ntfs3: terminate the cached volume label after UTF-8 conversion
    cvelistv5