CVE-2026-80860
Description
In the Linux kernel, the following vulnerability has been resolved: fuse: fix race between interrupt and resend After commit f8fce75fedf7 ("fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req") the WARN_ON(!list_empty(&req->intr_entry)) in fuse_request_free() still triggers due to the following race: In request_wait_answer() if (test_bit(FR_SENT, &req->flags)) -> returns true In fuse_chan_resend() clear_bit(FR_SENT, &req->flags) In request_wait_answer() queue_interrupt(req) Fix by: - move clearing FR_SENT inside fpq->lock - move setting FR_PENDING inside fiq->lock - recheck FR_SENT after acquiring fiq->lock in fuse_dev_queue_interrupt()
How to fix
- Linux Linux67ddf061790e833d7e34f9dc901866c9fb25d72d, 0f930904452945f409eeeb0c9afa08bf27185cb1, 26fbe4bc3ef3ab0200407681cbef182af5d151de, ed9c881f3b498383f73c42712b359419da42a7b0, 6.12.111, 6.18.51, 7.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 1d8ecd0cd696a5df0b2f72046a4ccee5d2a8ec2c ≤ v < 67ddf061790e833d7e34f9dc901866c9fb25d72d, 7366e6f4d2b4c7002b13fb01219e83679dad4127 ≤ v < 0f930904452945f409eeeb0c9afa08bf27185cb1, f8fce75fedf73ac72aa09163deb8f4291fdcaad2 ≤ v < 26fbe4bc3ef3ab0200407681cbef182af5d151de, f8fce75fedf73ac72aa09163deb8f4291fdcaad2 ≤ v < ed9c881f3b498383f73c42712b359419da42a7b0, 893479015cb6442fd389d3b553ab3036c9541715, 6.12.96 ≤ v < 6.12.111, 6.18.39 ≤ v < 6.18.51, 7.1.4 ≤ v < 7.2, 7.2 | 67ddf061790e833d7e34f9dc901866c9fb25d72d, 0f930904452945f409eeeb0c9afa08bf27185cb1, 26fbe4bc3ef3ab0200407681cbef182af5d151de, ed9c881f3b498383f73c42712b359419da42a7b0, 6.12.111, 6.18.51, 7.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.