IM
IronMonkey Threat Research

CVE-2026-53167 MEDIUM

Published: 2026-06-25 | Last Modified: 2026-07-30 | Status: Modified

Description

In the Linux kernel, the following vulnerability has been resolved: fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios FUSE_NOTIFY_RETRIEVE must be limited to uptodate folios; !uptodate folios can contain uninitialized data. Since FUSE_NOTIFY_RETRIEVE is intended to only return data that is already in the page cache and not wait for data from the FUSE daemon, treat !uptodate folios as if they weren't present. This only has security impact on systems that don't enable automatic zero-initialization of all page allocations via CONFIG_INIT_ON_ALLOC_DEFAULT_ON or init_on_alloc=1.

CVSS Metrics

Base Score: 5.5 (MEDIUM)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 1.8

Impact Score: 3.6

Weaknesses

Source Type Description
[email protected] Primary
en CWE-908

Affected Products

Vendor Product Version Update Type
linux linux_kernel * <built-in method update of dict object at 0x7fd38541f140> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd385057680> Operating System
linux linux_kernel 7.1 <built-in method update of dict object at 0x7fd38541f580> Operating System
linux linux_kernel 7.1 <built-in method update of dict object at 0x7fd368e88a00> Operating System
linux linux_kernel 7.1 <built-in method update of dict object at 0x7fd38541f800> Operating System
linux linux_kernel 7.1 <built-in method update of dict object at 0x7fd38541e1c0> Operating System
linux linux_kernel 7.1 <built-in method update of dict object at 0x7fd385054a40> Operating System
linux linux_kernel 7.1 <built-in method update of dict object at 0x7fd385055140> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:7.1:rc5:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:7.1:rc6:*:*:*:*:*:*

References