CVE-2026-90096

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the fuse direct write iter() function where the pos variable is captured before the generic write checks() function is called. For writes using the O APPEND flag, generic write checks() moves the ki pos to the end of the file (EOF). Because the initial position is used for post-write invalidation instead of the updated EOF position, the system targets a stale range. This can lead to data inconsistency when the file size is not page-aligned, as concurrent readers may access a cached tail page containing stale data instead of the newly written data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.