PT-2026-61126 · Linux · Linux Kernel

CVE-2026-63810 · Published 2026-07-19 · Updated 2026-07-19

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the bdev pseudo-filesystem, an internal kernel filesystem that should not be accessible to userspace. A kernel NULL pointer dereference occurs when userspace attempts to mount this filesystem and access files. This happens because the move mount() system call utilizes pointers from the inode operations structure, which are set to 0 for the bdev pseudo-filesystem via inode->i op = &empty iops;.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-63810

Affected Products

Linux Kernel

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-63810 · Security Note
• https://git.kernel.org/stable/c/f73aa66dffcb8e61e78f01b56163ec16a15d06d2 · Note
• https://twitter.com/VulmonFeeds/status/2078915078624002254 · Twitter Post
• https://git.kernel.org/stable/c/3804e6de30ae7b053d53341d9d6944356cf23b40 · Note
• https://git.kernel.org/stable/c/197971e6ffc0a6356b2ba2b22beb42bc0f7e412d · Note
• https://git.kernel.org/stable/c/717f721eb67d2dacd3ed5f7495aef2f442e84ce4 · Note