Race condition in Linux kernel - CVE-2026-68095

Vulnerability identifier: #VU142231

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-68095

CWE-ID: CWE-362

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to a race condition in fuse_uring_do_register in fs/fuse/dev_uring.c when registering a FUSE io_uring ring entry while a connection abortion is occurring. A local user can trigger concurrent registration and connection abort operations to cause a denial of service.

The issue can leave the abort or unmount thread hung indefinitely in an unkillable state and may leak ring, queue, and entry objects.

Linux kernel
openEuler
kernel
bpftool
bpftool-debuginfo
kernel-debuginfo
kernel-debugsource
kernel-devel
kernel-extra-modules
kernel-headers
kernel-source
kernel-tools
kernel-tools-debuginfo
kernel-tools-devel
perf
perf-debuginfo
python3-perf
python3-perf-debuginfo

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
kernel - update to 6.6.0-145.3.31.162
bpftool - update to 6.6.0-145.3.31.162
bpftool-debuginfo - update to 6.6.0-145.3.31.162
kernel-debuginfo - update to 6.6.0-145.3.31.162
kernel-debugsource - update to 6.6.0-145.3.31.162
kernel-devel - update to 6.6.0-145.3.31.162
kernel-extra-modules - update to 6.6.0-145.3.31.162
kernel-headers - update to 6.6.0-145.3.31.162
kernel-source - update to 6.6.0-145.3.31.162
kernel-tools - update to 6.6.0-145.3.31.162
kernel-tools-debuginfo - update to 6.6.0-145.3.31.162
kernel-tools-devel - update to 6.6.0-145.3.31.162
perf - update to 6.6.0-145.3.31.162
perf-debuginfo - update to 6.6.0-145.3.31.162
python3-perf - update to 6.6.0-145.3.31.162
python3-perf-debuginfo - update to 6.6.0-145.3.31.162

• https://git.kernel.org/stable/c/2cd945492bc5b472e814272e88b731bb9bb17629
• https://git.kernel.org/stable/c/3bca70235a706de76fe9a81defd37d987062c686
• https://git.kernel.org/stable/c/952b5d36f6a298f57c52a59e72076c69386a8aaf

• Race condition in Linux kernel fuse
• openEuler 24.03 LTS SP3 update for kernel