CVE-2026-80860

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-80860
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80860.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-80860
Downstream
Related
Published
2026-09-04T15:55:14Z
Modified
2026-10-20T02:30:37Z
Summary
fuse: fix race between interrupt and resend
Details

In the Linux kernel, the following vulnerability has been resolved:

fuse: fix race between interrupt and resend

After commit f8fce75fedf7 ("fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req") the WARN_ON(!list_empty(&req->intr_entry)) in fuse_request_free() still triggers due to the following race:

In request_wait_answer() if (test_bit(FR_SENT, &req->flags)) -> returns true

In fuse_chan_resend() clear_bit(FR_SENT, &req->flags)

In request_wait_answer() queue_interrupt(req)

Fix by:

  • move clearing FR_SENT inside fpq->lock

  • move setting FR_PENDING inside fiq->lock

  • recheck FR_SENT after acquiring fiq->lock in fuse_dev_queue_interrupt()

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80860.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
1d8ecd0cd696a5df0b2f72046a4ccee5d2a8ec2c
Fixed
67ddf061790e833d7e34f9dc901866c9fb25d72d
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
7366e6f4d2b4c7002b13fb01219e83679dad4127
Fixed
0f930904452945f409eeeb0c9afa08bf27185cb1
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f8fce75fedf73ac72aa09163deb8f4291fdcaad2
Fixed
26fbe4bc3ef3ab0200407681cbef182af5d151de
Fixed
ed9c881f3b498383f73c42712b359419da42a7b0
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.12.96
Fixed
6.12.111
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.18.39
Fixed
6.18.51
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
7.1.4
Fixed
7.2
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
893479015cb6442fd389d3b553ab3036c9541715

Affected versions

v6.*
v6.12.100
v6.12.101
v6.12.102
v6.12.103
v6.12.104
v6.12.105
v6.12.106
v6.12.107
v6.12.108
v6.12.109
v6.12.110
v6.12.96
v6.12.97
v6.12.98
v6.12.99
v6.18.39
v6.18.40
v6.18.41
v6.18.42
v6.18.43
v6.18.44
v6.18.45
v6.18.46
v6.18.47
v6.18.48
v6.18.49
v6.18.50
v7.*
v7.1.10
v7.1.11
v7.1.12
v7.1.13
v7.1.4
v7.1.5
v7.1.6
v7.1.7
v7.1.8
v7.1.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80860.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.12.111
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.51
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80860.json"