Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat FUSE (libfuse) ausnutzen, um beliebigen Programmcode auszuführen oder um einen Denial-of-Service-Zustand zu verursachen.
Product
Red Hat Fuse ist eine Open-Source-Integrationsplattform, die auf Apache Camel basiert.
Vulnerabilities 2
-
High 7.8CVE-2026-33150 Public exploit
Use After Free in libfuse
libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a use-after-free vulnerability in the io_uring subsystem of libfuse allows a local attacker to crash FUSE filesystem processes and potentially execute arb…
-
Medium 5.5
libfuse: NULL Pointer Dereference and Memory Leak in io_uring Queue Initialization
libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a NULL pointer dereference and memory leak in fuse_uring_init_queue allows a local user to crash the FUSE daemon or cause resource exhaustion. When numa_a…
Revision history
-
#2
Neue Updates von Gentoo aufgenommen
-
#1
Initiale Fassung
References
-
OSS Security Mailing List vom 2026-03-29
https://seclists.org/fulldisclosure/2026/Mar/12
-
Libfuse GitHub vom 2026-03-29
https://github.com/libfuse/libfuse/security/advisories/GHSA-qxv7-xrc2-qmfx
-
Libfuse GitHub vom 2026-03-29
https://github.com/libfuse/libfuse/security/advisories/GHSA-X669-V3MQ-R358
-
Gentoo Linux Security Advisory GLSA-202604-03 vom 2026-04-17
https://security.gentoo.org/glsa/202604-03