CVE-2026-47187

SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative targets containing parent-directory components that SSHFS passes through FUSE for resolution by the client kernel against the local...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100514)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100514 advisory. In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before returning from fusereffolio fusereffolio unlocks the request but doe...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: trivy, zot, kubevela, fuse-overlayfs-snapshotter, helm-push, up, flux-helm-controller, gitness, melange, grype, kots, helm, ctop, kubescape, buildkitd, newrelic-infrastructure-agent, kaniko, skaffold, cilium-cli, eksctl, flux-source-controller, k3d, k8sgpt...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: cilium-envoy, wuzz, runc, fuse-overlayfs-snapshotter, localstack, backup-restore-operator, k8s-device-plugin, nvidia-gpu-operator-validator, gitness, etcd-fips, gendesk, aws-load-balancer-controller, k3s, etcd, cilium-envoy-fips, rke2-runtime-fips, rke2-runtime,...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: cilium-envoy, wuzz, runc, fuse-overlayfs-snapshotter, localstack, backup-restore-operator, k8s-device-plugin, nvidia-gpu-operator-validator, gitness, etcd-fips, gendesk, aws-load-balancer-controller, k3s, etcd, cilium-envoy-fips, rke2-runtime-fips, rke2-runtime,...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: vault-fips, grafana-fips, consul-fips, elastic-agent-fips, zot, elastic-agent, beats, frankenphp-8.5, mattermost, fuse-overlayfs-snapshotter, grafana, consul, frankenphp-8.2, kine, commercial-expanso-edge, k3s, frankenphp-8.4, rke2-runtime-fips, rke2-runtime, loki,...

GO-2026-5942 vulnerabilities

Vulnerabilities for packages: commercial-nginx-ingress, spicedb-operator, zitadel, flux-kustomize-controller, cloud-provider-azure-fips, cloud-provider-azure, gitlab-operator, prometheus-redis-exporter, omni-fips, gitlab-operator-fips, envconsul-fips, sftpgo-plugin-eventsearch, seaweedfs-operator...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: kine, fuse-overlayfs-snapshotter, k3s, loki, zot, containerd, datadog-agent...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kaniko, kots, k8sgpt, gitness, ctop, fuse-overlayfs-snapshotter, grype, helm, skaffold, zot, kubevela, helm-push, kubescape, melange, up, eksctl, buildkitd, k3d, flux-helm-controller, cilium-cli, trivy, newrelic-infrastructure-agent...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: runc, gitness, fuse-overlayfs-snapshotter, k3s, aws-load-balancer-controller, k8s-device-plugin, wuzz...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: runc, gitness, fuse-overlayfs-snapshotter, k3s, aws-load-balancer-controller, k8s-device-plugin, wuzz...

Linux Distros Unpatched Vulnerability : CVE-2026-68095

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse-uring: fix race between registration and connection abortion This fixes this race: - thread a: iouringenter - register sqe - fuseuringcreateringent -...

Linux Distros Unpatched Vulnerability : CVE-2026-68149

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs: preserve ACLDONTCACHE state in forgetcachedacl The ACLDONTCACHE state is meant to be a constant state for the inode for filesystems that want to opt out of...

CVE-2026-68149

A flaw was found in the Linux kernel. The forgetcachedacl helper function, intended to manage Access Control List ACL caching, incorrectly invalidates the ACLDONTCACHE state. This can lead to a Fuse Filesystem in Userspace filesystem returning stale cached ACL values. Consequently, this could...

CVE-2026-68095

A flaw was found in fuse-uring in the Linux kernel. A race condition exists between the registration of an I/O operation and the abortion of a FUSE connection. This can be triggered by a local attacker or a malicious application. This flaw can cause the unmount thread to hang indefinitely, leadin...

CVE-2026-68186

A flaw was found in the binfmtmisc component of the Linux kernel. An unprivileged user can exploit this by registering a binfmtmisc entry with a specially crafted interpreter path on a FUSE Filesystem in Userspace mount. If the interpreter open fails, it can lead to a NULL pointer dereference whe...

CVE-2026-68149

In the Linux kernel, the following vulnerability has been resolved: fs: preserve ACLDONTCACHE state in forgetcachedacl The ACLDONTCACHE state is meant to be a constant state for the inode for filesystems that want to opt out of posix acl caching. Commit facd61053cff1 "fuse: fixes after adapting t...

CVE-2026-68149

In the Linux kernel, the following vulnerability has been resolved: fs: preserve ACLDONTCACHE state in forgetcachedacl The ACLDONTCACHE state is meant to be a constant state for the inode for filesystems that want to opt out of posix acl caching. Commit facd61053cff1 "fuse: fixes after adapting t...

UBUNTU-CVE-2026-68149

In the Linux kernel, the following vulnerability has been resolved: fs: preserve ACLDONTCACHE state in forgetcachedacl The ACLDONTCACHE state is meant to be a constant state for the inode for filesystems that want to opt out of posix acl caching. Commit facd61053cff1 "fuse: fixes after adapting t...

CVE-2026-68095

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix race between registration and connection abortion This fixes this race: - thread a: iouringenter - register sqe - fuseuringcreateringent - allocate ent but doesn't grab queueref yet - thread b: fuseconndestroy -...