1986 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-64261
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse-uring: Avoid use-after-free in fuseuringasyncstopqueues fuseuringasyncstopqueues might run when the last reference on ring-queuerefs was already dropped. I...
Linux Distros Unpatched Vulnerability : CVE-2026-64265
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: clear intrentry in fuseresend and fuseremovependingreq When fuseresend moves a request from fpq-processing back to fiq-pending, it sets FRPENDING and clea...
Linux Distros Unpatched Vulnerability : CVE-2026-64258
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse-uring: remove request-less entries from entwreqqueue to fix NULL deref If a copy into the userspace ring buffer fails, a request will be terminated and...
PT-2026-64479
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference issue exists in the fuse-uring component. When a copy into the userspace ring buffer fails, the fuse uring req end function sets ent-fuse req to NULL but leaves the...
Linux Distros Unpatched Vulnerability : CVE-2026-64264
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse-uring: fix EFAULT clobber in fuseuringcommit copyfromuser returns the number of bytes not copied as an unsigned residual on failure 1..sizeofstruct...
PT-2026-64481
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the fuse-uring component. The fuse uring commit fetch function fails to check the queue-stopped value under a lock, and the fuse uring abort end requests...
PT-2026-64482
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the fuse-uring component. The function fuse uring async stop queues may execute after the final reference on the ring-queue refs variable has been droppe...
Linux Distros Unpatched Vulnerability : CVE-2026-64267
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: avoid 32-bit prune notification count wrap FUSENOTIFYPRUNE validates the nodeid payload length with: size - sizeofoutarg != outarg.count sizeofu64 On 32-b...
PT-2026-64488
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer wrap occurs in 32-bit kernels during the validation of the nodeid payload length for FUSE NOTIFY PRUNE. The check uses a calculation where the daemon-controlled count...
Linux Distros Unpatched Vulnerability : CVE-2026-64263
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse-uring: fix moving cancelled entry to entinuserspace list fuseuringcancel moves entries that are available these have no reqs attached to the entinuserspace...
Linux Distros Unpatched Vulnerability : CVE-2026-64259
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse-uring: make a fusereq on SQE commit only findable after memcpy Bad userspace might try to trick us and send commit SQEs request unique / commit-id of...
Linux Distros Unpatched Vulnerability : CVE-2026-64260
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse-uring: Avoid queue-stopped races and set/read that value under lock There are several readers of queue-stopped that check the value under lock, but...
PT-2026-64487
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the fuse module. The fuse ref folio function unlocks a request but fails to re-lock it before returning. This allows fuse chan abort to end the request,...
PT-2026-64484
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the fuse-uring component where the fuse uring cancel function moves available entries without attached requests to the ent in userspace list. The ent list request expire...
PT-2026-64480
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the fuse-uring component. A malicious user could send commit SQEs Submission Queue Entries requests with unique commit-ids for requests that have not yet...
PT-2026-64486
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the FUSE Filesystem in Userspace module. When the fuse resend function moves a request from fpq-processing back to fiq-pending, it fails to remove the in...
USN-8604-1 linux-azure-6.17 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Drivers...
USN-8604-1: Linux kernel (Azure) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Drivers...
CVE-2026-53388
A flaw was found in the Linux kernel's Filesystem in Userspace FUSE component. The fusetrymovefolio function, responsible for managing page cache folios, fails to re-lock a request after initially unlocking it on a successful path. This oversight allows another function, fusechanabort, to...
