CVE-2026-108982: Incomplete Cleanup

VeraCrypt 1.26.29 FUSE-T build on macOS sometimes allows unintended access to decrypted data. It does not terminate the FUSE-T auxiliary service go-nfsv4 and its associated VeraCrypt core-service helper processes when a volume is dismounted. After VeraCrypt reports the volume as dismounted, the...

libewf

libewf è una libreria per accedere all'Expert Witness Compression Format EWF. Informazioni sul progetto: Stato: sperimentale Licenza: LGPL-3.0-or-later Formati EWF supportati in lettura e scrittura: SMART .s01 EWF-S01 EnCase .E01 EWF-E01 .Ex01 EWF2-Ex01 Non supportati: .Ex01 EWF2-Ex01 compression...

CVE-2026-80856

A flaw was found in the Linux kernel's FUSE Filesystem in Userspace component. A local user could trigger a lock leak within the fusedosetattr function during a Direct Access DAX truncate operation. If a writeback flush fails, a critical lock is not properly released, causing subsequent file...

CVE-2026-80855

A flaw was found in the Linux kernel's Filesystem in Userspace FUSE component. A local user could exploit this by opening a file with the OTRUNC flag, which attempts to truncate the file. If a signal interrupts the Direct Access DAX page invalidation process during this operation, a lock can be...

CVE-2026-98215

In the Linux kernel, the following vulnerability has been resolved: selinux: preserve user SID across nested backing files SELinux saves the user file SID in a backing-file security blob so it remains available after mmap replaces vma-vmfile with a backing file. For nested backing files overlayfs...

CVE-2026-98215

The Linux kernel contains a vulnerability in SELinux related to how user file SIDs are preserved across nested backing files, such as overlayfs over overlayfs or FUSE passthrough . When mmap() replaces vma->vm_file with a backing file, the system may incorrectly use the SID of the mounter inst...

CVE-2026-98215 selinux: preserve user SID across nested backing files

In the Linux kernel, the following vulnerability has been resolved: selinux: preserve user SID across nested backing files SELinux saves the user file SID in a backing-file security blob so it remains available after mmap replaces vma-vmfile with a backing file. For nested backing files overlayfs...

CVE-2026-98215: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: selinux: preserve user SID across nested backing files SELinux saves the user file SID in a backing-file security blob so it remains available after mmap replaces vma-vmfile with a backing file. For nested backing files overlayfs...

CVE-2026-48711

A flaw was found in SSHFS, a network filesystem client. An attacker can exploit this vulnerability by providing a specially crafted mount source that includes argument delimiters. This improper handling of the mount source allows for argument injection, leading to the execution of arbitrary...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: fuse: Fixed the issue of leaking the lock during setattr when a writeback failure occurs. The fusedosetattr function calls filemapinvalidatelock, which involves a DAX truncate operation with faultblocked = true. This lock is...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: fuse: Fixed the issue of leaking the invalidate lock when opening an OTRUNC DAX operation fails. The fuseopen function calls filemapinvalidatelock for a DAX truncate daxtruncate = true and releases it before the outinodeunlock...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: fuse: The code must initialize the contents of pages beyond the end-of-file before marking the pages as “uptodate”. fusenotifystore, unlike fusedoreadpage, does not enable page zeroing because it can be used to change partial...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: fuse: The re-lock request is made before returning from fusereffolio. In fusereffolio, the request is unlocked, but it is not re-locked before returning. fusechanabort can terminate the request, and the async end callback e.g....

[SECURITY] Fedora 45 Update: s3fs-fuse-1.97-4.fc45

s3fs is a FUSE file system that allows you to mount an Amazon S3 bucket as a local file system. It stores files natively and transparently in S3 i.e., you can use other programs to access the same files. Maximum file size is 5 TB when using multipart upload. s3fs is stable and is being used in...

[SECURITY] Fedora 45 Update: pam_mount-2.20-8.fc45

This module is aimed at environments with central file servers that a user wishes to mount on login and unmount on logout, such as semi-diskless stations where many users can logon and where statically mounting the entire /home from a server is a security risk, or listing all possible volumes in...

[SECURITY] Fedora 45 Update: fuse-emulator-1.6.0-16.fc45

Fuse is a spectrum emulator which emulates multiple models, including the 16K, 48K, 128K, +2, +2A, +3 and various clones...

CLEANSTART-2026-GD03162 logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem

Security vulnerability affects the util-linux package. A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem...

CLEANSTART-2026-WY70417 logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem

Security vulnerability affects the util-linux package. A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem...

Rocky Linux 8.8 [CIQ] Security Update: fuse-overlayfs / fuse-overlayfs-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0801)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260801 advisory. This advisory aggregates security fixes for the fuse-overlayfs SRPM in CIQ LTS 8.8. It addresses 39 CVEs: CVE-2020-10756, CVE-2021-3592, CVE-2021-3593,...

Rocky Linux 8.6 [CIQ] Security Update: fuse-overlayfs / fuse-overlayfs-debuginfo / etc (ciqsa-2026_1085)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261085 advisory. This advisory aggregates security fixes for the fuse-overlayfs SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-21626. Tenable has extracted the preceding...