CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's FUSE (Filesystem in Userspace) implementation, specifically in the fuse_ref_folio() function, which fails to re-lock a request after unlocking it. This oversight can lead to use-after-free conditions, potentially allowing attackers to exploit freed memory, resulting in system crashes or arbitrary code execution. Organizations utilizing Linux systems, particularly those relying on FUSE for file operations, should prioritize applying the patch to mitigate this high-severity risk.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before returning from fuse_ref_folio() fuse_ref_folio() unlocks the request but does not re-lock it before returning. fuse_chan_abort() can end the request and the async end callback (eg fuse_writepage_free()) can free the args while the subsequent copy chain logic after fuse_ref_folio() accesses them, leading to use-after-free issues. Fix this by locking the request in fuse_ref_folio() before returning.
Related CVEs
Other vulnerabilities affecting the same vendor(s)