44 matches found
CVE-2026-96812
Improper Exposure of Resource to Wrong Sphere in the host file helper gofer in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a...
CVE-2026-96812 Host Root Sandbox Escape in gVisor via Character Device Passthrough and CUSE
Improper Exposure of Resource to Wrong Sphere in the host file helper gofer in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a...
Linux Distros Unpatched Vulnerability : CVE-2026-90140
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cuse: wait for pending RCU callbacks on module exit Since commit 053fc4f755ad fuse: fix UAF in rcu pathwalks, fuseconnput frees the fuseconn through callrcu...
AZL-102567 CVE-2026-90140 affecting package kernel 6.6.152.1-1
In the Linux kernel, the following vulnerability has been resolved: cuse: wait for pending RCU callbacks on module exit Since commit 053fc4f755ad "fuse: fix UAF in rcu pathwalks", fuseconnput frees the fuseconn through callrcu rather than synchronously. For cuse, fc-release is cusefcrelease, whic...
DEBIAN-CVE-2026-90140
In the Linux kernel, the following vulnerability has been resolved: cuse: wait for pending RCU callbacks on module exit Since commit 053fc4f755ad "fuse: fix UAF in rcu pathwalks", fuseconnput frees the fuseconn through callrcu rather than synchronously. For cuse, fc-release is cusefcrelease, whic...
CVE-2026-90140
In the Linux kernel, the following vulnerability has been resolved: cuse: wait for pending RCU callbacks on module exit Since commit 053fc4f755ad "fuse: fix UAF in rcu pathwalks", fuseconnput frees the fuseconn through callrcu rather than synchronously. For cuse, fc-release is cusefcrelease, whic...
CVE-2026-90140 cuse: wait for pending RCU callbacks on module exit
In the Linux kernel, the following vulnerability has been resolved: cuse: wait for pending RCU callbacks on module exit Since commit 053fc4f755ad "fuse: fix UAF in rcu pathwalks", fuseconnput frees the fuseconn through callrcu rather than synchronously. For cuse, fc-release is cusefcrelease, whic...
CVE-2026-90140 cuse: wait for pending RCU callbacks on module exit
In the Linux kernel, the following vulnerability has been resolved: cuse: wait for pending RCU callbacks on module exit Since commit 053fc4f755ad "fuse: fix UAF in rcu pathwalks", fuseconnput frees the fuseconn through callrcu rather than synchronously. For cuse, fc-release is cusefcrelease, whic...
CVE-2026-90140
This Linux kernel vulnerability affects the cuse (Character device in Userspace) module. Since commit 053fc4f755ad, fuse_conn_put() releases the fuse_conn via call_rcu() rather than synchronously. Because fc->release points to cuse_fc_release() in the cuse module, removing the module (rmmod cu...
EUVD-2026-81733
In the Linux kernel, the following vulnerability has been resolved: cuse: wait for pending RCU callbacks on module exit Since commit 053fc4f755ad "fuse: fix UAF in rcu pathwalks", fuseconnput frees the fuseconn through callrcu rather than synchronously. For cuse, fc-release is cusefcrelease, whic...
CVE-2026-90140: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: cuse: wait for pending RCU callbacks on module exit Since commit 053fc4f755ad "fuse: fix UAF in rcu pathwalks", fuseconnput frees the fuseconn through callrcu rather than synchronously. For cuse, fc-release is cusefcrelease, whic...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000546)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000546 advisory. Memory leak in the cusechannelrelease function in fs/fuse/cuse.c in the Linux kernel before 4.4 allows local users to cause a denial of service memory consumption or...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002020)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002020 advisory. Memory leak in the cusechannelrelease function in fs/fuse/cuse.c in the Linux kernel before 4.4 allows local users to cause a denial of service memory consumption or...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002063)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002063 advisory. Memory leak in the cusechannelrelease function in fs/fuse/cuse.c in the Linux kernel before 4.4 allows local users to cause a denial of service memory consumption or...
EUVD-2016-2334
Malware in sbrugna...
EUVD-2010-4615
Malware in sbrugna...
SUSE CVE-2010-4650
Buffer overflow in the fusedoioctl function in fs/fuse/file.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service or possibly have unspecified other impact by leveraging the ability to operate a CUSE server...
SUSE CVE-2015-1339
Memory leak in the cusechannelrelease function in fs/fuse/cuse.c in the Linux kernel before 4.4 allows local users to cause a denial of service memory consumption or possibly have unspecified other impact by opening /dev/cuse many times...
SUSE CVE-2016-1233
An unspecified udev rule in the Debian fuse package in jessie before 2.9.3-15+deb8u2, in stretch before 2.9.5-1, and in sid before 2.9.5-1 sets world-writable permissions for the /dev/cuse character device, which allows local users to gain privileges via a character device in /dev, related to an...
CVE-2022-23645
swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface. Versions prior to 0.5.3, 0.6.2, and 0.7.1 are vulnerable to out-of-bounds read. A specially crafted header of swtpm's state, where the blobheader's hdrsize indicator has an invalid value, may cause an...