Linux Kernel FUSE Vulnerability Lets Attackers Gain Root Privileges

A Linux kernel vulnerability in the FUSE subsystem can allow a local attacker to gain root privileges by overflowing the page cache with attacker-controlled directory entries. The flaw is tracked as CVE-2026-31694 and affects the code path used when the kernel caches FUSE readdir results. FUSE lets a userspace filesystem talk to the kernel...

Read the full article at the source.