CVE-2026-80855

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on open OTRUNC DAX failure fuseopen takes filemapinvalidatelock for a DAX truncate daxtruncate = true and releases it before the outinodeunlock label. But when fusedaxbreaklayouts fails, the goto...

CVE-2026-80856: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on setattr writeback failure fusedosetattr takes filemapinvalidatelock for a DAX truncate faultblocked = true and releases it at the out:/error: labels. But when a writeback flush is also needed, a...

PT-2026-91315

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on open O TRUNC DAX failure fuse open takes filemap invalidate lock for a DAX truncate dax truncate = true and releases it before the out inode unlock label. But when fuse dax break layouts fails, t...

PT-2026-91304

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on setattr writeback failure fuse do setattr takes filemap invalidate lock for a DAX truncate fault blocked = true and releases it at the out:/error: labels. But when a writeback flush is also neede...

PT-2026-85736

In the Linux kernel, the following vulnerability has been resolved: fuse: publish io-uring queues with release semantics fuse uring create queue initializes a fuse ring queue and then publishes the pointer into ring-queuesqid with WRITE ONCE under the fch-lock. There are several readers that may...

CVE-2026-80857: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fuse: wait for FRFINISHED on abortonkill to prevent use-after-free The abortonkill path in requestwaitanswer calls fuseabortconn and returns without waiting for FRFINISHED. If fusedevdowrite is concurrently processing the same...

CVE-2026-80858: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fuse: publish io-uring queues with release semantics fuseuringcreatequeue initializes a fuseringqueue and then publishes the pointer into ring-queuesqid with WRITEONCE under the fch-lock. There are several readers that may...

CVE-2026-80859: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fuse: fix missing barrier when checking io-uring readiness fuseblockalloc reads fch-initialized and then fch-iouring. fch-iouring is set before fch-initialized, ordered by the smpwmb in fusechansetintialized, but fuseblockalloc h...

Linux Distros Unpatched Vulnerability : CVE-2026-80855

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: fix invalidate lock leak on open OTRUNC DAX failure fuseopen takes filemapinvalidatelock for a DAX truncate daxtruncate = true and releases it before the...

Linux Distros Unpatched Vulnerability : CVE-2026-80856

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: fix invalidate lock leak on setattr writeback failure fusedosetattr takes filemapinvalidatelock for a DAX truncate faultblocked = true and releases it at...

Linux Distros Unpatched Vulnerability : CVE-2026-80857

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: wait for FRFINISHED on abortonkill to prevent use-after-free The abortonkill path in requestwaitanswer calls fuseabortconn and returns without waiting for...

Linux Distros Unpatched Vulnerability : CVE-2026-80859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: fix missing barrier when checking io-uring readiness fuseblockalloc reads fch-initialized and then fch-iouring. fch-iouring is set before fch-initialized,...

Linux Distros Unpatched Vulnerability : CVE-2026-80858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: publish io-uring queues with release semantics fuseuringcreatequeue initializes a fuseringqueue and then publishes the pointer into ring-queuesqid with...

Linux Distros Unpatched Vulnerability : CVE-2026-80860

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: fix race between interrupt and resend After commit f8fce75fedf7 fuse: clear intrentry in fuseresend and fuseremovependingreq the...

CVE-2026-80860: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fuse: fix race between interrupt and resend After commit f8fce75fedf7 "fuse: clear intrentry in fuseresend and fuseremovependingreq" the WARNON!listempty&req-intrentry in fuserequestfree still triggers due to the following race: ...

CVE-2026-80855: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on open OTRUNC DAX failure fuseopen takes filemapinvalidatelock for a DAX truncate daxtruncate = true and releases it before the outinodeunlock label. But when fusedaxbreaklayouts fails, the goto...

PT-2026-85737

In the Linux kernel, the following vulnerability has been resolved: fuse: fix missing barrier when checking io-uring readiness fuse block alloc reads fch-initialized and then fch-io uring. fch-io uring is set before fch-initialized, ordered by the smp wmb in fuse chan set intialized, but fuse blo...

PT-2026-85738

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists between the interrupt and resend processes in the FUSE module. This occurs when request wait answer checks the FR SENT bit in req-flags and finds it true, but fus...

PT-2026-85735

In the Linux kernel, the following vulnerability has been resolved: fuse: wait for FR FINISHED on abort on kill to prevent use-after-free The abort on kill path in request wait answer calls fuse abort conn and returns without waiting for FR FINISHED. If fuse dev do write is concurrently processin...

PT-2026-85734

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on setattr writeback failure fuse do setattr takes filemap invalidate lock for a DAX truncate fault blocked = true and releases it at the out:/error: labels. But when a writeback flush is also neede...