FUSE synchronization issue in Linux Kernel affecting filesystem creation

CVE-2026-31713

What is CVE-2026-31713?

A vulnerability in the Linux kernel relates to the FUSE (Filesystem in Userspace) mechanism, where the process can hang during filesystem creation. This occurs if a fatal signal interrupts the server during the FUSE_INIT phase. The design flaw permits the mounting thread to retain the device file descriptor, inhibiting an abort process. This behavior is a regression from previous implementations where mounting took place asynchronously, avoiding the recursive system call that locks the file descriptor during errors or crashes.

References