DEBIAN-CVE-2026-89560

In the Linux kernel, the following vulnerability has been resolved: landlock: Require LANDLOCKACCESSFSMAKEREG for whiteout creation Whiteout objects are used in the upper layer of an OverlayFS to indicate that the file with this name does not exist in the unified view, even if it is present in on...

openSUSE 16 Security Update : fuse-overlayfs (openSUSE-SU-2026:21753-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21753-1 advisory. This update for fuse-overlayfs fixes the following issue: - CVE-2026-52791: privilege escalation due to SUID/SGID bit preservation after truncate...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, melange, fuse-overlayfs-snapshotter, k8sgpt, gitness, up, helm-push, helm, flux-source-controller, skaffold, trivy, ctop, flux-helm-controller, grype, kubescape, k3d, kots, eksctl, zot, cilium-cli, kubevela, buildkitd, kaniko...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, etcd-fips, fuse-overlayfs-snapshotter, gitness, backup-restore-operator, gendesk, rke2-runtime, rke2-runtime-fips, wuzz, k8s-device-plugin, cilium-envoy-fips, runc, kube-conformance, aws-load-balancer-controller, localstack, cilium-envoy, terraform,...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: datadog-agent, fuse-overlayfs-snapshotter, grafana, loki, datadog-agent-fips, beats, elastic-agent-fips, rke2-runtime, rke2-runtime-fips, frankenphp-8.4, containerd, frankenphp-8.2, mattermost-fips, consul, frankenphp-8.3, elastic-agent, beats-fips, vault, kine, k3s,...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, etcd-fips, fuse-overlayfs-snapshotter, gitness, backup-restore-operator, gendesk, rke2-runtime, rke2-runtime-fips, wuzz, k8s-device-plugin, cilium-envoy-fips, runc, kube-conformance, aws-load-balancer-controller, localstack, cilium-envoy, terraform,...

GO-2026-5942 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-fis-fips, dcgm-exporter-fips, kyverno-policy-reporter-plugins-kyverno, flux-image-automation-controller-fips, vendir, cerbos, zarf-fips, amazon-cloudwatch-agent-operator, crossplane-provider-azure-kusto, commercial-spilo, kubernetes-dashboard,...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: containerd, fuse-overlayfs-snapshotter, loki, k3s, kine, zot...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: helm, skaffold, k8sgpt, zot, buildkitd, kots, up, eksctl, kubevela, flux-helm-controller, newrelic-infrastructure-agent, cilium-cli, k3d, kubescape, fuse-overlayfs-snapshotter, flux-source-controller, helm-push, melange, trivy, ctop, grype, gitness, kaniko...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, fuse-overlayfs-snapshotter, k3s, runc, k8s-device-plugin, wuzz, gitness...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, fuse-overlayfs-snapshotter, k3s, runc, k8s-device-plugin, wuzz, gitness...

OPENSUSE-SU-2026:11461-1 fuse-overlayfs-1.17-1.1 on GA media

These are all security issues fixed in the fuse-overlayfs-1.17-1.1 package on the GA media of openSUSE Tumbleweed...

[SECURITY] Fedora 44 Update: fuse-overlayfs-1.17-1.fc44

FUSE overlay+shiftfs implementation for rootless containers...

SUSE CVE-2026-52791

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...

Fedora 44 : fuse-overlayfs (2026-4e0490640f)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4e0490640f advisory. Update to fuse-overlayfs 1.17 to fix CVE-2026-52791: privilege escalation via SUID/SGID bit preservation on file truncation. When a file with SUID/SGID bits ...

CVE-2026-52791

A flaw was found in fuse-overlayfs, a component used for rootless containers. This vulnerability allows a low-privileged process to retain SUID Set User ID and SGID Set Group ID permissions on files after they are truncated or opened with the OTRUNC flag. This can enable a local attacker to...

CVE-2026-52791

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...

AZL-94145 CVE-2026-52791 affecting package fuse-overlayfs 1.14-1

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...

CVE-2026-52791

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...

UBUNTU-CVE-2026-52791

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...