-

CVE-2026-80860

fuse: fix race between interrupt and resend

In the Linux kernel, the following vulnerability has been resolved:

fuse: fix race between interrupt and resend

After commit f8fce75fedf7 ("fuse: clear intr_entry in fuse_resend and
fuse_remove_pending_req") the WARN_ON(!list_empty(&req->intr_entry)) in
fuse_request_free() still triggers due to the following race:

In request_wait_answer()
  if (test_bit(FR_SENT, &req->flags)) -> returns true

In fuse_chan_resend()
  clear_bit(FR_SENT, &req->flags)

In request_wait_answer()
  queue_interrupt(req)

Fix by:

 - move clearing FR_SENT inside fpq->lock

 - move setting FR_PENDING inside fiq->lock

 - recheck FR_SENT after acquiring fiq->lock in fuse_dev_queue_interrupt()
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 1d8ecd0cd696a5df0b2f72046a4ccee5d2a8ec2c
Version < 67ddf061790e833d7e34f9dc901866c9fb25d72d
Status affected
Version 7366e6f4d2b4c7002b13fb01219e83679dad4127
Version < 0f930904452945f409eeeb0c9afa08bf27185cb1
Status affected
Version f8fce75fedf73ac72aa09163deb8f4291fdcaad2
Version < 26fbe4bc3ef3ab0200407681cbef182af5d151de
Status affected
Version f8fce75fedf73ac72aa09163deb8f4291fdcaad2
Version < ed9c881f3b498383f73c42712b359419da42a7b0
Status affected
Version 893479015cb6442fd389d3b553ab3036c9541715
Status affected
Version 6.12.96
Version < 6.12.111
Status affected
Version 6.18.39
Version < 6.18.51
Status affected
Version 7.1.4
Version < 7.2
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 7.2
Status affected
Version 0
Version < 7.2
Status unaffected
Version <= 6.12.*
Version 6.12.111
Status unaffected
Version <= 6.18.*
Version 6.18.51
Status unaffected
Version <= 7.2.*
Version 7.2.3
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.15% 0.041
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/26fbe4bc3ef3ab0200407681cbef182af5d151de
https://git.kernel.org/stable/c/ed9c881f3b498383f73c42712b359419da42a7b0
https://git.kernel.org/stable/c/0f930904452945f409eeeb0c9afa08bf27185cb1
https://git.kernel.org/stable/c/67ddf061790e833d7e34f9dc901866c9fb25d72d