CVE-2026-80860

fuse: fix race between interrupt and resend

State: Published
Severity: Not scored
Published: Sep 4, 2026
Updated: Oct 19, 2026
Reserved: Aug 26, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

fuse: fix race between interrupt and resend

After commit f8fce75fedf7 ("fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req") the WARN_ON(!list_empty(&req->intr_entry)) in fuse_request_free() still triggers due to the following race:

In request_wait_answer() if (test_bit(FR_SENT, &req->flags)) -> returns true

In fuse_chan_resend() clear_bit(FR_SENT, &req->flags)

In request_wait_answer() queue_interrupt(req)

Fix by:

- move clearing FR_SENT inside fpq->lock

- move setting FR_PENDING inside fiq->lock

- recheck FR_SENT after acquiring fiq->lock in fuse_dev_queue_interrupt()

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1d8ecd0cd696a5df0b2f72046a4ccee5d2a8ec2c to before 67ddf061790e833d7e34f9dc901866c9fb25d72dAffected 7366e6f4d2b4c7002b13fb01219e83679dad4127 to before 0f930904452945f409eeeb0c9afa08bf27185cb1Affected f8fce75fedf73ac72aa09163deb8f4291fdcaad2 to before 26fbe4bc3ef3ab0200407681cbef182af5d151deAffected f8fce75fedf73ac72aa09163deb8f4291fdcaad2 to before ed9c881f3b498383f73c42712b359419da42a7b0Affected 893479015cb6442fd389d3b553ab3036c9541715Affected 6.12.96 to before 6.12.111Affected 6.18.39 to before 6.18.51Affected 7.1.4 to before 7.2Affected
LinuxLinux	7.2Affected before 7.2Not affected 6.12.111 through 6.12.Not affected 6.18.51 through 6.18.Not affected 7.2.3 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

1d8ecd0cd696a5df0b2f72046a4ccee5d2a8ec2c to before 67ddf061790e833d7e34f9dc901866c9fb25d72dAffected
7366e6f4d2b4c7002b13fb01219e83679dad4127 to before 0f930904452945f409eeeb0c9afa08bf27185cb1Affected
f8fce75fedf73ac72aa09163deb8f4291fdcaad2 to before 26fbe4bc3ef3ab0200407681cbef182af5d151deAffected
f8fce75fedf73ac72aa09163deb8f4291fdcaad2 to before ed9c881f3b498383f73c42712b359419da42a7b0Affected
893479015cb6442fd389d3b553ab3036c9541715Affected
6.12.96 to before 6.12.111Affected
6.18.39 to before 6.18.51Affected
7.1.4 to before 7.2Affected

LinuxLinux

7.2Affected
before 7.2Not affected
6.12.111 through 6.12.*Not affected
6.18.51 through 6.18.*Not affected
7.2.3 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.