2641 matches found
CVE-2026-23473
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2026-23473
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2026-23473
The CVE-2026-23473 issue affects the Linux kernel io_uring/poll path. A race occurs when a socket send and shutdown() wake up the poll loop back-to-back; the first wake assigns poll ownership (poll_refs=1) and the second increments to 2. io_poll_check_events() calls io_poll_issue(), which perform...
CVE-2026-23473
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
libfuse Use-After-Free / NULL Pointer Dereference
Two memory safety vulnerabilities in libfuse's iouring code path introduced in 3.18.0 have been fixed in libfuse 3.18.2. Only the iouring transport is affected; the traditional /dev/fuse path is not. One is a use-after-free in the iouring session shutdown path. A local user can crash the FUSE...
The vulnerability of the io_ring_exit_work() function in the io_uring/io_uring.c module of the Linux kernel’s asynchronous input/output interface allows a hacker to cause a service failure.
The vulnerability of the ioringexitwork function in the iouring/iouring.c module, a component of the Linux kernel’s asynchronous input/output interface, is related to initialization errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
Security update for glusterfs (important)
openSUSE Security Update: Security update for glusterfs Announcement ID: openSUSE-SU-2026:0104-1 Rating: important References: 1208517 1208519 1210894 1212476 Cross-References: CVE-2022-48340 CVE-2023-26253 CVSS scores: CVE-2022-48340 SUSE: 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H...
Security update for glusterfs (important)
openSUSE Security Update: Security update for glusterfs Announcement ID: openSUSE-SU-2026:0099-1 Rating: important References: 1208517 1208519 1210894 1212476 Cross-References: CVE-2022-48340 CVE-2023-26253 CVSS scores: CVE-2022-48340 SUSE: 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H...
CVE-2026-33179
A flaw was found in libfuse. A local user can exploit a NULL pointer dereference and memory leak vulnerability during the setup of the iouring input/output mechanism. This can occur when memory allocation or queue registration fails, leading to the FUSE daemon crashing or resource exhaustion. Thi...
CVE-2026-33150
A flaw was found in libfuse. A use-after-free vulnerability in the iouring subsystem allows a local attacker to potentially execute arbitrary code and crash FUSE Filesystem in Userspace filesystem processes. This occurs when iouring thread creation fails due to resource exhaustion, such as limits...
The vulnerability of the io_get_ext_arg_reg() function in the io_uring module of the Linux kernel’s asynchronous input/output interface allows a attacker to cause a service failure.
The vulnerability of the iogetextargreg function in the iouring module of the Linux kernel’s asynchronous input/output interface is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...
SUSE CVE-2026-33179
libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a NULL pointer dereference and memory leak in fuseuringinitqueue allows a local user to crash the FUSE daemon or cause resource exhaustion. When numaalloclocal fails during iouring queue entry...
The vulnerability in the io_uring/zcrx.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the iouring/zcrx.c module of the Linux operating system’s kernel is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
SUSE CVE-2026-23275
In the Linux kernel, the following vulnerability has been resolved: iouring: ensure ctx-rings is stable for task work flags manipulation If DEFERTASKRUN | SETUPTASKRUN is used and task work is added while the ring is being resized, it's possible for the OR'ing of IORINGSQTASKRUN to happen in the...
Linux Distros Unpatched Vulnerability : CVE-2026-33150
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a use-after-free vulnerability in the iouring subsystem...
Linux Distros Unpatched Vulnerability : CVE-2026-33179
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a NULL pointer dereference and memory leak in...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the fuseuringinitqueue process. An attacker can cause the daemon to crash or exhaust system resources by triggering a failure in numaalloclocal during iouring queue entry setup, leading the code to proceed wi...
CVE-2026-33179
libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a NULL pointer dereference and memory leak in fuseuringinitqueue allows a local user to crash the FUSE daemon or cause resource exhaustion. When numaalloclocal fails during iouring queue entry...
DEBIAN-CVE-2026-33179
libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a NULL pointer dereference and memory leak in fuseuringinitqueue allows a local user to crash the FUSE daemon or cause resource exhaustion. When numaalloclocal fails during iouring queue entry...