#fuse

0 stories this week · 0 this month · 2 in 6 months · mostly security

Stories per day · 30 days

2 stories, newest first · one card per story

ZDI discloses CVE-2026-64265, a CVSS 7.8 race condition in the Linux Kernel FUSE subsystem enabling local privilege escalation.

libfuse 3.18.3 disables fuse_session_custom_io() by default to stop non-kernel peers from forging FUSE requests libfuse parses unvalidated.

Stories tagged #fuse