SecurityLobstersabout 1 hour ago
FUSE bug lets unprivileged users gain root
1 min read
CVE-2026-31694 is a missing bounds check in fs/fuse/readdir.c that lets an unprivileged local user write 24 bytes past a kernel page. A FUSE daemon with namelen=4095 triggers the overflow, which can land on a cached /etc/passwd copy to escalate to root. Fixed in mainline on 20 April 2026.
Level
Hype check
Tap to vote and see what everyone thinks.
