CVE-2026-90140

A flaw was found in the Linux kernel's cuse module. This vulnerability, a Use-After-Free, occurs when the cuse module is unloaded before a pending Read-Copy-Update RCU callback has completed. This can lead to a system crash or, under specific circumstances, allow a local attacker to execute...

Linux Distros Unpatched Vulnerability : CVE-2026-96812

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Exposure of Resource to Wrong Sphere in the host file helper gofer in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled...

Exposure of Resource to Wrong Sphere

Overview Affected versions of this package are vulnerable to Exposure of Resource to Wrong Sphere in the gofer process when CUSE is enabled. An attacker can execute arbitrary code with root privileges on the host system by including a /dev/cuse character device node in a container image and...

Exposure of Resource to Wrong Sphere

Overview Affected versions of this package are vulnerable to Exposure of Resource to Wrong Sphere in the gofer process when CUSE is enabled. An attacker can execute arbitrary code with root privileges on the host system by including a /dev/cuse character device node in a container image and...

Exposure of Resource to Wrong Sphere

Overview Affected versions of this package are vulnerable to Exposure of Resource to Wrong Sphere in the gofer process when CUSE is enabled. An attacker can execute arbitrary code with root privileges on the host system by including a /dev/cuse character device node in a container image and...

Exposure of Resource to Wrong Sphere

Overview Affected versions of this package are vulnerable to Exposure of Resource to Wrong Sphere in the gofer process when CUSE is enabled. An attacker can execute arbitrary code with root privileges on the host system by including a /dev/cuse character device node in a container image and...

DEBIAN-CVE-2026-96812

Improper Exposure of Resource to Wrong Sphere in the host file helper gofer in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a...

EUVD-2026-87111

Improper Exposure of Resource to Wrong Sphere in the host file helper gofer in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a...

CVE-2026-96812 Host Root Sandbox Escape in gVisor via Character Device Passthrough and CUSE

Improper Exposure of Resource to Wrong Sphere in the host file helper gofer in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a...

CVE-2026-96812

A vulnerability in Google gVisor on Linux platforms (prior to commit 573a9e73cf844f) allows a local attacker with container image deployment privileges to achieve root code execution on the host system. The issue stems from an improper exposure of resource in the host file helper (gofer ) when CU...

CVE-2026-96812 Host Root Sandbox Escape in gVisor via Character Device Passthrough and CUSE

Improper Exposure of Resource to Wrong Sphere in the host file helper gofer in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a...

CVE-2026-96812

Improper Exposure of Resource to Wrong Sphere in the host file helper gofer in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a...

CVE-2026-96812

Improper Exposure of Resource to Wrong Sphere in the host file helper gofer in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a...

CVE-2026-96812: Exposure of Resource to Wrong Sphere

Improper Exposure of Resource to Wrong Sphere in the host file helper gofer in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a...

PT-2026-98870

Name of the Vulnerable Software and Affected Versions Google gVisor versions prior to commit 573a9e73cf844f Description An improper exposure of resource to the wrong sphere exists in the host file helper gofer on Linux platforms with CUSE Character device for Userspace enabled. A local attacker...

SUSE CVE-2026-90140

In the Linux kernel, the following vulnerability has been resolved: cuse: wait for pending RCU callbacks on module exit Since commit 053fc4f755ad "fuse: fix UAF in rcu pathwalks", fuseconnput frees the fuseconn through callrcu rather than synchronously. For cuse, fc-release is cusefcrelease, whic...

Linux Distros Unpatched Vulnerability : CVE-2026-90140

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cuse: wait for pending RCU callbacks on module exit Since commit 053fc4f755ad fuse: fix UAF in rcu pathwalks, fuseconnput frees the fuseconn through callrcu...

AZL-102567 CVE-2026-90140 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: cuse: wait for pending RCU callbacks on module exit Since commit 053fc4f755ad "fuse: fix UAF in rcu pathwalks", fuseconnput frees the fuseconn through callrcu rather than synchronously. For cuse, fc-release is cusefcrelease, whic...

DEBIAN-CVE-2026-90140

In the Linux kernel, the following vulnerability has been resolved: cuse: wait for pending RCU callbacks on module exit Since commit 053fc4f755ad "fuse: fix UAF in rcu pathwalks", fuseconnput frees the fuseconn through callrcu rather than synchronously. For cuse, fc-release is cusefcrelease, whic...

CVE-2026-90140

In the Linux kernel, the following vulnerability has been resolved: cuse: wait for pending RCU callbacks on module exit Since commit 053fc4f755ad "fuse: fix UAF in rcu pathwalks", fuseconnput frees the fuseconn through callrcu rather than synchronously. For cuse, fc-release is cusefcrelease, whic...