13 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-80858
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: publish io-uring queues with release semantics fuseuringcreatequeue initializes a fuseringqueue and then publishes the pointer into ring-queuesqid with...
Linux Distros Unpatched Vulnerability : CVE-2026-80857
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: wait for FRFINISHED on abortonkill to prevent use-after-free The abortonkill path in requestwaitanswer calls fuseabortconn and returns without waiting for...
Linux Distros Unpatched Vulnerability : CVE-2026-80859
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: fix missing barrier when checking io-uring readiness fuseblockalloc reads fch-initialized and then fch-iouring. fch-iouring is set before fch-initialized,...
CVE-2026-31694-POC
CVE-2026-31694: Écriture hors limites dans le cache readdir de FUSE Un contrôle de limites manquant dans fs/fuse/readdir.c:fuseadddirenttocache. Un serveur FUSE renvoie un dirent avec namelen = 4095, qui se sérialise en un enregistrement de 4120 octets. Le noyau le copie dans une seule page de...
Linux Distros Unpatched Vulnerability : CVE-2026-64266
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: re-lock request before returning from fusereffolio fusereffolio unlocks the request but does not re-lock it before returning. fusechanabort can end the...
Linux Distros Unpatched Vulnerability : CVE-2026-64265
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: clear intrentry in fuseresend and fuseremovependingreq When fuseresend moves a request from fpq-processing back to fiq-pending, it sets FRPENDING and clea...
Linux Distros Unpatched Vulnerability : CVE-2026-64267
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: avoid 32-bit prune notification count wrap FUSENOTIFYPRUNE validates the nodeid payload length with: size - sizeofoutarg != outarg.count sizeofu64 On 32-b...
Linux Distros Unpatched Vulnerability : CVE-2026-53311
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: fix uninit-value in fusedentryrevalidate fusedentryrevalidate may be called with a dentry that didn't had -dtime initialised. The issue was found with...
CVE-2026-33150
libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a use-after-free vulnerability in the iouring subsystem of libfuse allows a local attacker to crash FUSE filesystem processes and potentially execute arbitrary code. When iouring thread creati...
CVE-2026-33150
libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a use-after-free vulnerability in the iouring subsystem of libfuse allows a local attacker to crash FUSE filesystem processes and potentially execute arbitrary code. When iouring thread creati...
CVE-2026-33150
libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a use-after-free vulnerability in the iouring subsystem of libfuse allows a local attacker to crash FUSE filesystem processes and potentially execute arbitrary code. When iouring thread creati...
Linux Distros Unpatched Vulnerability : CVE-2025-39888
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fuse: Block access to folio overlimit syz reported a slab-out-of-bounds Write in...
The vulnerability in the implementation of the FUSE file system in Linux kernel allows a hacker to induce a service failure.
The vulnerability of the FUSE file system implementation in Linux operating systems is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created program...