CVE-2026-80857 fuse: wait for FR_FINISHED on abort_on_kill to prevent use-after-free

In the Linux kernel, the following vulnerability has been resolved: fuse: wait for FRFINISHED on abortonkill to prevent use-after-free The abortonkill path in requestwaitanswer calls fuseabortconn and returns without waiting for FRFINISHED. If fusedevdowrite is concurrently processing the same...

CVE-2026-80857 fuse: wait for FR_FINISHED on abort_on_kill to prevent use-after-free

In the Linux kernel, the following vulnerability has been resolved: fuse: wait for FRFINISHED on abortonkill to prevent use-after-free The abortonkill path in requestwaitanswer calls fuseabortconn and returns without waiting for FRFINISHED. If fusedevdowrite is concurrently processing the same...

EUVD-2026-71307

In the Linux kernel, the following vulnerability has been resolved: fuse: wait for FRFINISHED on abortonkill to prevent use-after-free The abortonkill path in requestwaitanswer calls fuseabortconn and returns without waiting for FRFINISHED. If fusedevdowrite is concurrently processing the same...

CVE-2026-80857

A use-after-free vulnerability exists in the Linux kernel's FUSE (Filesystem in Userspace) subsystem. In request_wait_answer(), the abort_on_kill path calls fuse_abort_conn() and returns without waiting for the FR_FINISHED flag. If fuse_dev_do_write() is concurrently processing the same request (...

EUVD-2026-71306

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on setattr writeback failure fusedosetattr takes filemapinvalidatelock for a DAX truncate faultblocked = true and releases it at the out:/error: labels. But when a writeback flush is also needed, a...

CVE-2026-80856 fuse: fix invalidate lock leak on setattr writeback failure

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on setattr writeback failure fusedosetattr takes filemapinvalidatelock for a DAX truncate faultblocked = true and releases it at the out:/error: labels. But when a writeback flush is also needed, a...

CVE-2026-80856

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on setattr writeback failure fusedosetattr takes filemapinvalidatelock for a DAX truncate faultblocked = true and releases it at the out:/error: labels. But when a writeback flush is also needed, a...

CVE-2026-80856

CVE-2026-80856 is a lock leak in the Linux kernel FUSE subsystem. In fuse_do_setattr(), the function acquires filemap_invalidate_lock() for a DAX truncate but fails to release it when write_inode_now() returns an error (e.g., the FUSE daemon returns -EIO ). The leaked rwsem causes any subsequent ...

CVE-2026-80855

CVE-2026-80855 affects the Linux kernel FUSE filesystem. In fuse_open(), when a DAX truncate (O_TRUNC) triggers filemap_invalidate_lock(), a subsequent failure in fuse_dax_break_layouts() (e.g., returning -ERESTARTSYS after a signal interrupts the wait for busy DAX pages to drain) causes the code...

EUVD-2026-71305

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on open OTRUNC DAX failure fuseopen takes filemapinvalidatelock for a DAX truncate daxtruncate = true and releases it before the outinodeunlock label. But when fusedaxbreaklayouts fails, the goto...

CVE-2026-80855 fuse: fix invalidate lock leak on open O_TRUNC DAX failure

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on open OTRUNC DAX failure fuseopen takes filemapinvalidatelock for a DAX truncate daxtruncate = true and releases it before the outinodeunlock label. But when fusedaxbreaklayouts fails, the goto...

CVE-2026-80855

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on open OTRUNC DAX failure fuseopen takes filemapinvalidatelock for a DAX truncate daxtruncate = true and releases it before the outinodeunlock label. But when fusedaxbreaklayouts fails, the goto...

CVE-2026-80855 fuse: fix invalidate lock leak on open O_TRUNC DAX failure

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on open OTRUNC DAX failure fuseopen takes filemapinvalidatelock for a DAX truncate daxtruncate = true and releases it before the outinodeunlock label. But when fusedaxbreaklayouts fails, the goto...

CVE-2026-80855: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on open OTRUNC DAX failure fuseopen takes filemapinvalidatelock for a DAX truncate daxtruncate = true and releases it before the outinodeunlock label. But when fusedaxbreaklayouts fails, the goto...

CVE-2026-80859: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fuse: fix missing barrier when checking io-uring readiness fuseblockalloc reads fch-initialized and then fch-iouring. fch-iouring is set before fch-initialized, ordered by the smpwmb in fusechansetintialized, but fuseblockalloc h...

CVE-2026-80858: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fuse: publish io-uring queues with release semantics fuseuringcreatequeue initializes a fuseringqueue and then publishes the pointer into ring-queuesqid with WRITEONCE under the fch-lock. There are several readers that may...

CVE-2026-80857: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fuse: wait for FRFINISHED on abortonkill to prevent use-after-free The abortonkill path in requestwaitanswer calls fuseabortconn and returns without waiting for FRFINISHED. If fusedevdowrite is concurrently processing the same...

PT-2026-85733

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A lock leak occurs in the FUSE module during an open operation with O TRUNC for DAX Direct Access files. The fuse open function acquires the filemap invalidate lock for a DAX truncate, b...

PT-2026-85734

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A lock leak occurs in the FUSE filesystem when a writeback flush fails during a setattr operation. Specifically, the fuse do setattr function acquires the filemap invalidate lock for a D...

PT-2026-91304

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on setattr writeback failure fuse do setattr takes filemap invalidate lock for a DAX truncate fault blocked = true and releases it at the out:/error: labels. But when a writeback flush is also neede...