AZL-90761
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-90761.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-90761
- Upstream
- Published
- 2026-06-25T09:16:34Z
- Modified
- 2026-08-30T05:26:50Z
- Summary
- CVE-2026-53167 affecting package kernel for versions less than 6.6.144.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
fuse: limit FUSENOTIFYRETRIEVE to uptodate folios
FUSENOTIFYRETRIEVE must be limited to uptodate folios; !uptodate folios can contain uninitialized data. Since FUSENOTIFYRETRIEVE is intended to only return data that is already in the page cache and not wait for data from the FUSE daemon, treat !uptodate folios as if they weren't present.
This only has security impact on systems that don't enable automatic zero-initialization of all page allocations via CONFIGINITONALLOCDEFAULTON or initon_alloc=1.
- References