CVE-2026-93828 (GCVE-0-2026-93828)
Vulnerability from cvelistv5
Published
2026-09-24 16:03
Modified
2026-10-21 12:52
Severity ?
Summary
In the Linux kernel, the following vulnerability has been resolved: exfat: fix handling of damaged volume in exfat_create_upcase_table() When the size of the upcase table is set to zero in the dentry for any reason(e.g. corrupted media or misbehaving device), an integer overflow causes the module to loop indefinitely. If the size of the upcase table is read zero, do not attempt to load the table. Instead, fallback to loading the default upcase table. If the size of the upcase table is zero or no upcase table is found, raise exfat_fs_error() to mark the volume read-only.
References
Impacted products
Vendor Product Version
Linux Linux Version: 370e812b3ec190fa492c9fd5a80c38b086d105c0
Version: 370e812b3ec190fa492c9fd5a80c38b086d105c0
Version: 370e812b3ec190fa492c9fd5a80c38b086d105c0
Version: 370e812b3ec190fa492c9fd5a80c38b086d105c0
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/exfat/nls.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "29723256fccf46e55c2a44bd6b8345bef7ba079b",
              "status": "affected",
              "version": "370e812b3ec190fa492c9fd5a80c38b086d105c0",
              "versionType": "git"
            },
            {
              "lessThan": "60ace93811609e4dd883e9de5fb4462ed834160a",
              "status": "affected",
              "version": "370e812b3ec190fa492c9fd5a80c38b086d105c0",
              "versionType": "git"
            },
            {
              "lessThan": "2cc0b612343638057ef321ce735201a7c2f52f25",
              "status": "affected",
              "version": "370e812b3ec190fa492c9fd5a80c38b086d105c0",
              "versionType": "git"
            },
            {
              "lessThan": "20dd3185d13865214ff25b0bf7b931e8d73be1ac",
              "status": "affected",
              "version": "370e812b3ec190fa492c9fd5a80c38b086d105c0",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/exfat/nls.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.7"
            },
            {
              "lessThan": "5.7",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.160",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.111",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.53",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.160",
                  "versionStartIncluding": "5.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.111",
                  "versionStartIncluding": "5.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.53",
                  "versionStartIncluding": "5.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "5.7",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nexfat: fix handling of damaged volume in exfat_create_upcase_table()\n\nWhen the size of the upcase table is set to zero in the dentry for any\nreason(e.g. corrupted media or misbehaving device), an integer overflow\ncauses the module to loop indefinitely.\n\nIf the size of the upcase table is read zero, do not attempt to load the\ntable. Instead, fallback to loading the default upcase table. If the\nsize of the upcase table is zero or no upcase table is found, raise\nexfat_fs_error() to mark the volume read-only."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-21T12:52:41.978Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/29723256fccf46e55c2a44bd6b8345bef7ba079b"
        },
        {
          "url": "https://git.kernel.org/stable/c/60ace93811609e4dd883e9de5fb4462ed834160a"
        },
        {
          "url": "https://git.kernel.org/stable/c/2cc0b612343638057ef321ce735201a7c2f52f25"
        },
        {
          "url": "https://git.kernel.org/stable/c/20dd3185d13865214ff25b0bf7b931e8d73be1ac"
        }
      ],
      "title": "exfat: fix handling of damaged volume in exfat_create_upcase_table()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-93828",
    "datePublished": "2026-09-24T16:03:08.417Z",
    "dateReserved": "2026-09-18T17:59:28.793Z",
    "dateUpdated": "2026-10-21T12:52:41.978Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.