CVE-2026-63833
kernel: ntfs3: reject direct userspace writes to reserved $LX* xattrs
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 19, 2026
Updated · November 5, 2026
Description
A flaw was found in the Linux kernel's ntfs3 filesystem driver. An unprivileged local user with write access to an ntfs3 mounted filesystem can exploit a vulnerability by directly modifying internal Windows Subsystem for Linux (WSL) permission metadata. This manipulation allows the user to gain root privileges on the system.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CWE-915 · Improperly Controlled Modification of Dynamically-Determined Object Attributes