PT-2026-94443 · Linux · Linux Kernel
CVE-2026-90095
·
Published
2026-09-17
·
Updated
2026-09-24
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the fuse implementation where the
fuse uring cmd() function fails to refuse IORING OP URING CMD requests if the connection was not enabled due to a missing FUSE OVER IO URING flag in the FUSE INIT reply. This omission prevents the barrier in fuse uring ready() from functioning correctly, which can lead to deadlock states, specifically between fch->bg lock and queue->lock while IO operations are ongoing.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel