SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-80860

UNKNOWN · CVSS N/A EPSS 0.15%

Source: NVD + CISA KEV + EPSS · Published 2026-09-04 · Last synced 2026-09-19

CyberRota Analysis

AI-Generated

The vulnerability in the Linux kernel affects the FUSE (Filesystem in Userspace) subsystem, specifically related to a race condition between interrupt handling and request resending. This flaw can lead to unexpected behavior when processing filesystem requests, potentially compromising system stability or data integrity. Organizations using Linux systems that rely on FUSE should prioritize this fix to mitigate any risks associated with this race condition.

CVE
CVE-2026-80860
Severity
UNKNOWN
CVSS
N/A
EPSS
0.15%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: fuse: fix race between interrupt and resend After commit f8fce75fedf7 ("fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req") the WARN_ON(!list_empty(&req->intr_entry)) in fuse_request_free() still triggers due to the following race: In request_wait_answer() if (test_bit(FR_SENT, &req->flags)) -> returns true In fuse_chan_resend() clear_bit(FR_SENT, &req->flags) In request_wait_answer() queue_interrupt(req) Fix by: - move clearing FR_SENT inside fpq->lock - move setting FR_PENDING inside fiq->lock - recheck FR_SENT after acquiring fiq->lock in fuse_dev_queue_interrupt()