CVE-2026-63954 - Vulnerability Details

- hpfs: fix a crash if hpfs_map_dnode_bitmap fails

Description

In the Linux kernel, the following vulnerability has been resolved:

hpfs: fix a crash if hpfs_map_dnode_bitmap fails

If hpfs_map_dnode_bitmap fails, the code would call hpfs_brelse4 on
uninitialized quad buffer head, causing a crash.

Published: 2026-07-19

Score: 7.8 High

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 010b08084000ef018f1a8de5197087f3b91d8cfe
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< d98d8562b3284b5a5c8eb67e71b794508e46e288
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 1648a3c7f4e18f46a4881920133fc4f2494185a0
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 7c58c55a2a16f7274772507bd1637be609351b4f
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 1d73a533760bc5abb83b3cc759133596f7bb708f
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 0886c6f257fe3663f80218aa1919b0f3f21bf22c
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 4f37bb30b57d6d403d02673074555bd3c3602bef
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 974820a59efde7c1a7e1260bcfe9bb81f833cc9f

Linux

affected

Version	Status	Constraints
`2.6.12`	affected	—
`0`	unaffected	< 2.6.12
`5.10.259`	unaffected	≤ 5.10.*
`5.15.210`	unaffected	≤ 5.15.*
`6.1.176`	unaffected	≤ 6.1.*
`6.6.143`	unaffected	≤ 6.6.*
`6.12.93`	unaffected	≤ 6.12.*
`6.18.35`	unaffected	≤ 6.18.*
`7.0.12`	unaffected	≤ 7.0.*
`7.1`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,010b08084000ef018f1a8de5197087f3b91d8cfe)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,d98d8562b3284b5a5c8eb67e71b794508e46e288)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,1648a3c7f4e18f46a4881920133fc4f2494185a0)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,7c58c55a2a16f7274772507bd1637be609351b4f)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,1d73a533760bc5abb83b3cc759133596f7bb708f)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,0886c6f257fe3663f80218aa1919b0f3f21bf22c)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,4f37bb30b57d6d403d02673074555bd3c3602bef)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,974820a59efde7c1a7e1260bcfe9bb81f833cc9f)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`2.6.12`	affected	semver	—
`[0,2.6.12)`	unaffected	semver	—
`[5.10.259,5.11.0)`	unaffected	semver	—
`[5.15.210,5.16.0)`	unaffected	semver	—
`[6.1.176,6.2.0)`	unaffected	semver	—
`[6.6.143,6.7.0)`	unaffected	semver	—
`[6.12.93,6.13.0)`	unaffected	semver	—
`[6.18.35,6.19.0)`	unaffected	semver	—
`[7.0.12,7.1.0)`	unaffected	semver	—
`[7.1,*]`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00164.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/010b08084000ef018f1a8de5197087f3b91d8cfe
https://git.kernel.org/stable/c/0886c6f257fe3663f80218aa1919b0f3f21bf22c
https://git.kernel.org/stable/c/1648a3c7f4e18f46a4881920133fc4f2494185a0
https://git.kernel.org/stable/c/1d73a533760bc5abb83b3cc759133596f7bb708f
https://git.kernel.org/stable/c/4f37bb30b57d6d403d02673074555bd3c3602bef
https://git.kernel.org/stable/c/7c58c55a2a16f7274772507bd1637be609351b4f
https://git.kernel.org/stable/c/974820a59efde7c1a7e1260bcfe9bb81f833cc9f
https://git.kernel.org/stable/c/d98d8562b3284b5a5c8eb67e71b794508e46e288
https://lore.kernel.org/linux-cve-announce/2026071955-CVE-2026-63954-d2b4@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-63954
https://www.cve.org/CVERecord?id=CVE-2026-63954

History

Wed, 22 Jul 2026 00:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-824
References		https://lore.kernel.org/linux-cve-announce/2026071955-CVE-2026-63954-d2b4@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-63954 https://www.cve.org/CVERecord?id=CVE-2026-63954

Tue, 21 Jul 2026 23:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-476

Mon, 20 Jul 2026 14:45:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

Sun, 19 Jul 2026 15:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: hpfs: fix a crash if hpfs_map_dnode_bitmap fails If hpfs_map_dnode_bitmap fails, the code would call hpfs_brelse4 on uninitialized quad buffer head, causing a crash.
Title		hpfs: fix a crash if hpfs_map_dnode_bitmap fails
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/010b08084000ef018f1a8de5197087f3b91d8cfe https://git.kernel.org/stable/c/0886c6f257fe3663f80218aa1919b0f3f21bf22c https://git.kernel.org/stable/c/1648a3c7f4e18f46a4881920133fc4f2494185a0 https://git.kernel.org/stable/c/1d73a533760bc5abb83b3cc759133596f7bb708f https://git.kernel.org/stable/c/4f37bb30b57d6d403d02673074555bd3c3602bef https://git.kernel.org/stable/c/7c58c55a2a16f7274772507bd1637be609351b4f https://git.kernel.org/stable/c/974820a59efde7c1a7e1260bcfe9bb81f833cc9f https://git.kernel.org/stable/c/d98d8562b3284b5a5c8eb67e71b794508e46e288

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-07-19T14:55:46.183Z

Updated: 2026-07-20T13:41:52.092Z

Reserved: 2026-07-19T07:54:57.023Z

Link: CVE-2026-63954

Vulnrichment

No data.

NVD

No data.

Redhat

Severity :

Publid Date: 2026-07-19T00:00:00Z

Links: CVE-2026-63954 - Bugzilla

OpenCVE Enrichment

Updated: 2026-07-22T04:45:02Z

Weaknesses

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object