64 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-64267
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: avoid 32-bit prune notification count wrap FUSENOTIFYPRUNE validates the nodeid payload length with: size - sizeofoutarg != outarg.count sizeofu64 On 32-b...
CVE-2026-53388 fuse: re-lock request before replacing page cache folio
In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before replacing page cache folio fusetrymovefolio unlocks the request on entry but does not re-lock it on the success path. This means fusechanabort can end the request and free the fuseioargs eg...
Linux Distros Unpatched Vulnerability : CVE-2026-53311
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: fix uninit-value in fusedentryrevalidate fusedentryrevalidate may be called with a dentry that didn't had -dtime initialised. The issue was found with...
Linux Distros Unpatched Vulnerability : CVE-2026-53167
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: limit FUSENOTIFYRETRIEVE to uptodate folios FUSENOTIFYRETRIEVE must be limited to uptodate folios; !uptodate folios can contain uninitialized data. Since...
Linux Distros Unpatched Vulnerability : CVE-2026-53168
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: reject fusenotify pagecache ops on directories The operations FUSENOTIFYSTORE and FUSENOTIFYRETRIEVE allow the FUSE daemon to actively write/read pagecach...
Security update for the Linux Kernel (Live Patch 52 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.209 fixes various security issues The following security issues were fixed: CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache bsc1261640. CVE-2026-31504: net: fix fanout UAF in packetrelease via NETDEVUP race...
Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-1817)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1817 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: remove read access to debugfs files CVE-2025-39901 In the Linux kernel, the following vulnerability has been resolved:...
Linux Distros Unpatched Vulnerability : CVE-2026-31694
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: reject oversized dirents in page cache fuseadddirenttocache computes a serialized dirent size from the server-controlled namelen field and copies the dire...
Linux Distros Unpatched Vulnerability : CVE-2026-31713
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fuse: abort on fatal signal during sync init When sync init is used and the server exits for...
Linux Distros Unpatched Vulnerability : CVE-2026-33150
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a use-after-free vulnerability in the iouring subsystem...
The vulnerability of the fs/fuse component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the fs/fuse component in Linux operating systems is related to errors during thread blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...
Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50112)
The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50112 advisory. - tls: Use skdstget and dstdevrcu in getnetdevforsock. Kuniyuki Iwashima Orabug: 38649136 CVE-2025-40149 - fuse: fix runtime warning on...
MiracleLinux 7 : fuse-2.9.2-11.el7 (AXSA:2019-3674:01)
The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-3674:01 advisory. fuse: bypass of the userallowother restriction when SELinux is active CVE-2018-10906 Tenable has extracted the preceding description block directly from the...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000855)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000855 advisory. A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a...
CVE-2025-68791
In the Linux kernel, the following vulnerability has been resolved: fuse: missing copyfinish in fuse-over-io-uring argument copies Fix a possible reference count leak of payload pages during fuse argument copies. Joanne: simplified error cleanup...
Linux Distros Unpatched Vulnerability : CVE-2025-68791
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fuse: missing copyfinish in fuse- over-io-uring argument copies Fix a possible reference cou...
EUVD-2010-3857
Malware in sbrugna...
EUVD-2010-0815
Malware in sbrugna...