CVE-2026-93828

Received Received - Intake

BaseFortify

Publication date: 2026-09-24

Last updated on: 2026-09-25

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: exfat: fix handling of damaged volume in exfat_create_upcase_table() When the size of the upcase table is set to zero in the dentry for any reason(e.g. corrupted media or misbehaving device), an integer overflow causes the module to loop indefinitely. If the size of the upcase table is read zero, do not attempt to load the table. Instead, fallback to loading the default upcase table. If the size of the upcase table is zero or no upcase table is found, raise exfat_fs_error() to mark the volume read-only.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-24

Last Modified

2026-09-25

Generated

2026-10-15

AI Q&A

2026-09-24

EPSS Evaluated

2026-10-13

NVD

CVE-2026-93828

EUVD

EUVD-2026-86217

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	370e812b3ec190fa492c9fd5a80c38b086d105c0
Linux	Linux	370e812b3ec190fa492c9fd5a80c38b086d105c0
Linux	Linux	370e812b3ec190fa492c9fd5a80c38b086d105c0
Linux	Linux	5.7

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel's exfat module occurs when a damaged volume sets the upcase table size to zero. This triggers an integer overflow, causing the system to loop indefinitely. The fix prevents loading the table if its size is zero and instead uses a default table or marks the volume read-only.

Detection Guidance

This vulnerability affects the exfat filesystem in the Linux kernel. Detection involves checking if the system uses the vulnerable exfat module and if corrupted exfat volumes are mounted. Inspect loaded kernel modules with 'lsmod | grep exfat' and check mounted exfat volumes with 'mount | grep exfat'. If a volume is mounted with exfat and exhibits unusual behavior like freezing, it may indicate exploitation.

Impact Analysis

If exploited, this flaw could cause system hangs or crashes due to infinite loops. It may also lead to data corruption or loss if the filesystem is incorrectly marked read-only, disrupting normal operations.

Compliance Impact

This vulnerability could impact compliance by causing data integrity issues or unavailability, which may violate GDPR's data protection principles or HIPAA's requirements for data availability and integrity. System downtime or corruption could lead to non-compliance.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve the exfat vulnerability. Avoid mounting untrusted or potentially corrupted exfat volumes. If a volume must be mounted, use read-only mode with 'mount -o ro'. Monitor system logs for exfat-related errors or warnings.

Hi! I’m here to help you understand CVE-2026-93828. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70