CVE-2026-80860

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-80860
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-80860.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-80860
Downstream
BELL (1)
DEBIAN (1)
openSUSE (1)
SUSE (4)
UBUNTU (1)
Related
openSUSE (1)
SUSE (4)
Published
2026-09-04T15:55:14Z
Modified
2026-11-13T04:06:58Z
Summary
fuse: fix race between interrupt and resend
Details

In the Linux kernel, the following vulnerability has been resolved:

fuse: fix race between interrupt and resend

After commit f8fce75fedf7 ("fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req") the WARN_ON(!list_empty(&req->intr_entry)) in fuse_request_free() still triggers due to the following race:

In request_wait_answer() if (test_bit(FR_SENT, &req->flags)) -> returns true

In fuse_chan_resend() clear_bit(FR_SENT, &req->flags)

In request_wait_answer() queue_interrupt(req)

Fix by:

  • move clearing FR_SENT inside fpq->lock

  • move setting FR_PENDING inside fiq->lock

  • recheck FR_SENT after acquiring fiq->lock in fuse_dev_queue_interrupt()

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80860.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
1d8ecd0cd696a5df0b2f72046a4ccee5d2a8ec2c
Fixed
67ddf061790e833d7e34f9dc901866c9fb25d72d
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
7366e6f4d2b4c7002b13fb01219e83679dad4127
Fixed
0f930904452945f409eeeb0c9afa08bf27185cb1
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f8fce75fedf73ac72aa09163deb8f4291fdcaad2
Fixed
26fbe4bc3ef3ab0200407681cbef182af5d151de
Fixed
ed9c881f3b498383f73c42712b359419da42a7b0
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
893479015cb6442fd389d3b553ab3036c9541715

Affected versions

v6.*
v6.12.100
v6.12.101
v6.12.102
v6.12.103
v6.12.104
v6.12.105
v6.12.106
v6.12.107
v6.12.108
v6.12.109
v6.12.110
v6.12.96
v6.12.97
v6.12.98
v6.12.99
v6.18.39
v6.18.40
v6.18.41
v6.18.42
v6.18.43
v6.18.44
v6.18.45
v6.18.46
v6.18.47
v6.18.48
v6.18.49
v6.18.50
v7.*
v7.1.10
v7.1.11
v7.1.12
v7.1.13
v7.1.4
v7.1.5
v7.1.6
v7.1.7
v7.1.8
v7.1.9

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-80860.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.12.96
Fixed
6.12.111
Type
ECOSYSTEM
Events
Introduced
6.18.39
Fixed
6.18.51
Type
ECOSYSTEM
Events
Introduced
7.1.4
Fixed
7.2
Type
ECOSYSTEM
Events
Introduced
7.2.0
Fixed
7.2.3

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-80860.json"