Linux Kernel Vulnerability in FUSE Component Affecting System Performance

CVE-2026-80859

What is CVE-2026-80859?

The vulnerability in the Linux kernel's FUSE subsystem arises from a missing read barrier during the check for io-uring readiness. This flaw may allow a CPU to incorrectly observe the state of initialization, leading to potential deadlocks due to a lock-order inversion, which was previously prevented. To fix this issue, an smp_rmb() barrier has been incorporated to align with the existing smp_wmb() in the initialization function, ensuring proper synchronization and enhancing overall system reliability.

References