CVE-2026-63808

A flaw was found in the Linux kernel's exFAT filesystem driver. A local attacker could exploit a use-after-free vulnerability in the exfat_find_dir_entry() function. This occurs because a buffer is prematurely released while still being referenced, which can be triggered by processing a specially crafted exFAT image. Successful exploitation leads to a system crash, resulting in a Denial of Service (DoS).

Red Hat rates this vulnerability as a Moderate impact because exploitation requires a user to mount a specially manipulated filesystem image, which typically demands administrative privileges or physical access to the host. Although the flaw allows a use-after-free condition that can crash the system or corrupt kernel memory, unprivileged users cannot mount external storage devices by default in standard server deployments. As a result, the attack surface is largely confined to environments where unprivileged mounting or removable media automounting is explicitly enabled.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.