Количество 28
Количество 28
CVE-2026-53388
In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before replacing page cache folio fuse_try_move_folio() unlocks the request on entry but does not re-lock it on the success path. This means fuse_chan_abort() can end the request and free the fuse_io_args (eg fuse_readpages_end()) while the subsequent copy chain logic after fuse_try_move_folio() accesses the fuse_io_args, leading to use-after-free issues. Fix this by calling lock_request() before replace_page_cache_folio(). This ensures the request is locked on the success path which will prevent the fuse_io_args from being freed while the later copying logic runs, and also ensures that the ap->folios[i]->mapping is never null since ap->folios[i] will always point to the newfolio after replace_page_cache_folio().
CVE-2026-53388
In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before replacing page cache folio fuse_try_move_folio() unlocks the request on entry but does not re-lock it on the success path. This means fuse_chan_abort() can end the request and free the fuse_io_args (eg fuse_readpages_end()) while the subsequent copy chain logic after fuse_try_move_folio() accesses the fuse_io_args, leading to use-after-free issues. Fix this by calling lock_request() before replace_page_cache_folio(). This ensures the request is locked on the success path which will prevent the fuse_io_args from being freed while the later copying logic runs, and also ensures that the ap->folios[i]->mapping is never null since ap->folios[i] will always point to the newfolio after replace_page_cache_folio().
CVE-2026-53388
In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before replacing page cache folio fuse_try_move_folio() unlocks the request on entry but does not re-lock it on the success path. This means fuse_chan_abort() can end the request and free the fuse_io_args (eg fuse_readpages_end()) while the subsequent copy chain logic after fuse_try_move_folio() accesses the fuse_io_args, leading to use-after-free issues. Fix this by calling lock_request() before replace_page_cache_folio(). This ensures the request is locked on the success path which will prevent the fuse_io_args from being freed while the later copying logic runs, and also ensures that the ap->folios[i]->mapping is never null since ap->folios[i] will always point to the newfolio after replace_page_cache_folio().
CVE-2026-53388
fuse: re-lock request before replacing page cache folio
CVE-2026-53388
In the Linux kernel, the following vulnerability has been resolved: f ...
ROS-20261008-80-0121
Уязвимость kernel-lt
ROS-20261008-73-0120
Уязвимость kernel-lt
GHSA-45w6-5frg-3vfq
In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before replacing page cache folio fuse_try_move_folio() unlocks the request on entry but does not re-lock it on the success path. This means fuse_chan_abort() can end the request and free the fuse_io_args (eg fuse_readpages_end()) while the subsequent copy chain logic after fuse_try_move_folio() accesses the fuse_io_args, leading to use-after-free issues. Fix this by calling lock_request() before replace_page_cache_folio(). This ensures the request is locked on the success path which will prevent the fuse_io_args from being freed while the later copying logic runs, and also ensures that the ap->folios[i]->mapping is never null since ap->folios[i] will always point to the newfolio after replace_page_cache_folio().
SUSE-SU-2026:3593-1
Security update for the Linux Kernel
SUSE-SU-2026:3595-1
Security update for the Linux Kernel
SUSE-SU-2026:3602-1
Security update for the Linux Kernel
SUSE-SU-2026:4595-1
Security update for the Linux Kernel
SUSE-SU-2026:4284-1
Security update for the Linux Kernel
SUSE-SU-2026:4369-1
Security update for the Linux Kernel
SUSE-SU-2026:3594-1
Security update for the Linux Kernel
ALT-PU-2026-11249
ALT-PU-2026-11249: package `kernel-image-6.12` update to version 6.12.96-alt1
SUSE-SU-2026:4282-1
Security update for the Linux Kernel
SUSE-SU-2026:3810-1
Security update for the Linux Kernel
SUSE-SU-2026:3790-1
Security update for the Linux Kernel
ALT-PU-2026-10470
ALT-PU-2026-10470: package `kernel-image-un-def` update to version 6.1.177-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-53388 In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before replacing page cache folio fuse_try_move_folio() unlocks the request on entry but does not re-lock it on the success path. This means fuse_chan_abort() can end the request and free the fuse_io_args (eg fuse_readpages_end()) while the subsequent copy chain logic after fuse_try_move_folio() accesses the fuse_io_args, leading to use-after-free issues. Fix this by calling lock_request() before replace_page_cache_folio(). This ensures the request is locked on the success path which will prevent the fuse_io_args from being freed while the later copying logic runs, and also ensures that the ap->folios[i]->mapping is never null since ap->folios[i] will always point to the newfolio after replace_page_cache_folio(). | CVSS3: 7.8 | 0% Низкий | 3 месяца назад |
 | CVE-2026-53388 In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before replacing page cache folio fuse_try_move_folio() unlocks the request on entry but does not re-lock it on the success path. This means fuse_chan_abort() can end the request and free the fuse_io_args (eg fuse_readpages_end()) while the subsequent copy chain logic after fuse_try_move_folio() accesses the fuse_io_args, leading to use-after-free issues. Fix this by calling lock_request() before replace_page_cache_folio(). This ensures the request is locked on the success path which will prevent the fuse_io_args from being freed while the later copying logic runs, and also ensures that the ap->folios[i]->mapping is never null since ap->folios[i] will always point to the newfolio after replace_page_cache_folio(). | CVSS3: 7 | 0% Низкий | 3 месяца назад |
 | CVE-2026-53388 In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before replacing page cache folio fuse_try_move_folio() unlocks the request on entry but does not re-lock it on the success path. This means fuse_chan_abort() can end the request and free the fuse_io_args (eg fuse_readpages_end()) while the subsequent copy chain logic after fuse_try_move_folio() accesses the fuse_io_args, leading to use-after-free issues. Fix this by calling lock_request() before replace_page_cache_folio(). This ensures the request is locked on the success path which will prevent the fuse_io_args from being freed while the later copying logic runs, and also ensures that the ap->folios[i]->mapping is never null since ap->folios[i] will always point to the newfolio after replace_page_cache_folio(). | CVSS3: 7.8 | 0% Низкий | 3 месяца назад |
 | CVE-2026-53388 fuse: re-lock request before replacing page cache folio | CVSS3: 7.8 | 0% Низкий | 3 месяца назад |
| CVE-2026-53388 In the Linux kernel, the following vulnerability has been resolved: f ... | CVSS3: 7.8 | 0% Низкий | 3 месяца назад |
 | ROS-20261008-80-0121 Уязвимость kernel-lt | CVSS3: 7.8 | 0% Низкий | 17 дней назад |
| ROS-20261008-73-0120 Уязвимость kernel-lt | CVSS3: 7.8 | 0% Низкий | 17 дней назад |
| GHSA-45w6-5frg-3vfq In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before replacing page cache folio fuse_try_move_folio() unlocks the request on entry but does not re-lock it on the success path. This means fuse_chan_abort() can end the request and free the fuse_io_args (eg fuse_readpages_end()) while the subsequent copy chain logic after fuse_try_move_folio() accesses the fuse_io_args, leading to use-after-free issues. Fix this by calling lock_request() before replace_page_cache_folio(). This ensures the request is locked on the success path which will prevent the fuse_io_args from being freed while the later copying logic runs, and also ensures that the ap->folios[i]->mapping is never null since ap->folios[i] will always point to the newfolio after replace_page_cache_folio(). | CVSS3: 7.8 | 0% Низкий | 3 месяца назад |
 | SUSE-SU-2026:3593-1 Security update for the Linux Kernel | 2 месяца назад | ||
| SUSE-SU-2026:3595-1 Security update for the Linux Kernel | 2 месяца назад | ||
| SUSE-SU-2026:3602-1 Security update for the Linux Kernel | 2 месяца назад | ||
| SUSE-SU-2026:4595-1 Security update for the Linux Kernel | 17 дней назад | ||
| SUSE-SU-2026:4284-1 Security update for the Linux Kernel | около 1 месяца назад | ||
| SUSE-SU-2026:4369-1 Security update for the Linux Kernel | 27 дней назад | ||
| SUSE-SU-2026:3594-1 Security update for the Linux Kernel | 2 месяца назад | ||
| ALT-PU-2026-11249 ALT-PU-2026-11249: package `kernel-image-6.12` update to version 6.12.96-alt1 | CVSS3: 10 | 3 месяца назад | |
| SUSE-SU-2026:4282-1 Security update for the Linux Kernel | около 1 месяца назад | ||
| SUSE-SU-2026:3810-1 Security update for the Linux Kernel | 2 месяца назад | ||
| SUSE-SU-2026:3790-1 Security update for the Linux Kernel | 2 месяца назад | ||
| ALT-PU-2026-10470 ALT-PU-2026-10470: package `kernel-image-un-def` update to version 6.1.177-alt1 | CVSS3: 10 | 3 месяца назад |
Уязвимостей на страницу