CVE-2026-80859fuse: fix missing barrier when checking io-uring readiness
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: fuse: fix missing barrier when checking io-uring readiness fuse_block_alloc() reads fch->initialized and then fch->io_uring. fch->io_uring is set before fch->initialized, ordered by the smp_wmb() in fuse_chan_set_intialized(), but fuse_block_alloc() has no matching read barrier between the two loads. This may lead a CPU to observe fch->initialized=1 but fch->io_uring=0, and skip the check that blocks request allocation until the io-uring queues are ready. This can reintroduce the lock-order inversion deadlock that commit 3393ff964e0f prevents. Add an smp_rmb() barrier to pair with the smp_wmb() in fuse_chan_set_initialized() to prevent this.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 3393ff964e0fa5def66570c54a4612bf9df06b76 before 8974575898cd7a4c818088f102b2e7a0286d3302; from 3393ff964e0fa5def66570c54a4612bf9df06b76 before dd9c835709f4bb3e4256eea7573e4e6e18f956de; from 3393ff964e0fa5def66570c54a4612bf9df06b76 before edb310bc27f0ad83e7fd558a3caf1a94ca511654 | CNA record |
References
- https://git.kernel.org/stable/c/8974575898cd7a4c818088f102b2e7a0286d3302
- https://git.kernel.org/stable/c/dd9c835709f4bb3e4256eea7573e4e6e18f956de
- https://git.kernel.org/stable/c/edb310bc27f0ad83e7fd558a3caf1a94ca511654
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.