Linux Kernel Vulnerability in FUSE Component Affecting File Attribute Handling

CVE-2026-80856

What is CVE-2026-80856?

A vulnerability exists within the FUSE component of the Linux kernel, primarily affecting file operations. Specifically, the issue arises in the handling of the filemap_invalidate_lock during attribute updates via the fuse_do_setattr() function. When a write_inode_now() failure occurs, the lock may not be released properly, leading to a potential stall during subsequent file operations. This inadequate locking mechanism can affect the functionality of setuid files and hinder system performance. A recent patch corrects this behavior by ensuring that the lock is appropriately released before returning an error, thus maintaining the integrity of the file operation process.

References