CVE-2026-90095

CVE-2026-90095 affects the Linux kernel FUSE subsystem. The root cause is a missing condition in fuse_uring_cmd() that failed to refuse IORING_OP_URING_CMD when the FUSE_OVER_IO_URING flag was absent from the FUSE_INIT reply. Without this guard, the barrier in fuse_uring_ready() does not function...

EUVD-2026-81956

In the Linux kernel, the following vulnerability has been resolved: fuse: Fix the condition to enable over-io-uring The existing condition in fuseuringcmd is there only to avoid disabling io-uring for connections that already run with it, missing was a condition to refuse any IORINGOPURINGCMD if...