Linux Distros Unpatched Vulnerability : CVE-2026-80859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: fix missing barrier when checking io-uring readiness fuseblockalloc reads fch-initialized and then fch-iouring. fch-iouring is set before fch-initialized,...

Linux Distros Unpatched Vulnerability : CVE-2026-80858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: publish io-uring queues with release semantics fuseuringcreatequeue initializes a fuseringqueue and then publishes the pointer into ring-queuesqid with...

Linux Distros Unpatched Vulnerability : CVE-2026-80857

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: wait for FRFINISHED on abortonkill to prevent use-after-free The abortonkill path in requestwaitanswer calls fuseabortconn and returns without waiting for...

CVE-2026-31694-POC

CVE-2026-31694: FUSE readdir 캐시 범위를 벗어난 쓰기 fs/fuse/readdir.c:fuseadddirenttocache에 경계 검사 누락이 있습니다. FUSE 서버가 namelen = 4095인 dirent를 반환하면, 이는 4120바이트 레코드로 직렬화됩니다. 커널이 이를 하나의 4096바이트 페이지 캐시 페이지에 복사하고, 서버가 제어하는 24바이트가 다음 물리 페이지로 오버플로됩니다. 이 저장소에는 쓰기 프리미티브에 대한 마커 PoC와, 오버플로를 페이지 캐시에 있는 /etc/passwd의...

Linux Distros Unpatched Vulnerability : CVE-2026-64266

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: re-lock request before returning from fusereffolio fusereffolio unlocks the request but does not re-lock it before returning. fusechanabort can end the...

Linux Distros Unpatched Vulnerability : CVE-2026-64265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: clear intrentry in fuseresend and fuseremovependingreq When fuseresend moves a request from fpq-processing back to fiq-pending, it sets FRPENDING and clea...

Linux Distros Unpatched Vulnerability : CVE-2026-64267

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: avoid 32-bit prune notification count wrap FUSENOTIFYPRUNE validates the nodeid payload length with: size - sizeofoutarg != outarg.count sizeofu64 On 32-b...

Linux Distros Unpatched Vulnerability : CVE-2026-53311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: fix uninit-value in fusedentryrevalidate fusedentryrevalidate may be called with a dentry that didn't had -dtime initialised. The issue was found with...

CVE-2026-33150

libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a use-after-free vulnerability in the iouring subsystem of libfuse allows a local attacker to crash FUSE filesystem processes and potentially execute arbitrary code. When iouring thread creati...

CVE-2026-33150

libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a use-after-free vulnerability in the iouring subsystem of libfuse allows a local attacker to crash FUSE filesystem processes and potentially execute arbitrary code. When iouring thread creati...

CVE-2026-33150

libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a use-after-free vulnerability in the iouring subsystem of libfuse allows a local attacker to crash FUSE filesystem processes and potentially execute arbitrary code. When iouring thread creati...

Linux Distros Unpatched Vulnerability : CVE-2025-39888

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fuse: Block access to folio overlimit syz reported a slab-out-of-bounds Write in...

The vulnerability in the implementation of the FUSE file system in Linux kernel allows a hacker to induce a service failure.

The vulnerability of the FUSE file system implementation in Linux operating systems is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created program...