SB20260812447 - Race condition in Linux kernel fuse

Description

This security bulletin contains information about 1 vulnerability.

1) Race condition (CVE-ID: CVE-2026-68095)

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to a race condition in fuse_uring_do_register in fs/fuse/dev_uring.c when registering a FUSE io_uring ring entry while a connection abortion is occurring. A local user can trigger concurrent registration and connection abort operations to cause a denial of service.

The issue can leave the abort or unmount thread hung indefinitely in an unkillable state and may leak ring, queue, and entry objects.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/2cd945492bc5b472e814272e88b731bb9bb17629
• https://git.kernel.org/stable/c/3bca70235a706de76fe9a81defd37d987062c686
• https://git.kernel.org/stable/c/952b5d36f6a298f57c52a59e72076c69386a8aaf