CVE-2026-80859

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the FUSE module where the fuse block alloc() function reads the fch->initialized and fch->io uring variables without a proper read barrier. Although fch->io uring is set before fch->initialized using a write memory barrier (smp wmb()) in fuse chan set initialized(), the lack of a matching read barrier in fuse block alloc() may cause a CPU to incorrectly observe fch->initialized as 1 while fch->io uring remains 0. This allows the system to skip the check that blocks request allocation until io-uring queues are ready, potentially leading to a lock-order inversion deadlock.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.