CVE-2026-80857

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the FUSE (Filesystem in Userspace) module. The abort on kill path within the request wait answer() function calls fuse abort conn() and returns without waiting for the FR FINISHED flag. If the fuse dev do write() function is concurrently processing the same request while FR LOCKED is set, the caller may free req->args while it is still being accessed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.