CVE-2026-80860 fuse: fix race between interrupt and resend

In the Linux kernel, the following vulnerability has been resolved: fuse: fix race between interrupt and resend After commit f8fce75fedf7 "fuse: clear intrentry in fuseresend and fuseremovependingreq" the WARNON!listempty&req-intrentry in fuserequestfree still triggers due to the following race: ...

CVE-2026-80858 fuse: publish io-uring queues with release semantics

In the Linux kernel, the following vulnerability has been resolved: fuse: publish io-uring queues with release semantics fuseuringcreatequeue initializes a fuseringqueue and then publishes the pointer into ring-queuesqid with WRITEONCE under the fch-lock. There are several readers that may...

CVE-2026-80855 fuse: fix invalidate lock leak on open O_TRUNC DAX failure

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on open OTRUNC DAX failure fuseopen takes filemapinvalidatelock for a DAX truncate daxtruncate = true and releases it before the outinodeunlock label. But when fusedaxbreaklayouts fails, the goto...

CVE-2026-43474

A flaw was found in the Linux kernel's fuse filesystem. A local user could exploit an uninitialized value vulnerability when calling vfsfileattrget. This could potentially lead to information disclosure or system instability...

Linux Distros Unpatched Vulnerability : CVE-2025-21896

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fuse: revert back to readaheadfolio for readahead In commit 3eab9d7bc2f4 fuse: convert...

PT-2025-26143 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A race condition between the write2 and close2 system calls in the Linux kernel's FUSE Filesystem in Userspace implementation allows pages to be dirtied after the fuse flush function h...

DEBIAN-CVE-2022-1011

A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write. This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation...

Linux Kernel < 3.16.1 - 'Remount FUSE' Local Privilege Escalation

/ FUSE-based exploit for CVE-2014-5207 Copyright c 2014 Andy Lutomirski Based on code that is: Copyright C 2001-2007 Miklos Szeredi This program can be distributed under the terms of the GNU GPL. See the file COPYING. gcc -Wall fusesuid.c pkg-config fuse --cflags --libs -o fusesuid mkdir test...