CVE-2026-31713: fuse: abort on fatal signal during sync init
In the Linux kernel, the following vulnerability has been resolved:
fuse: abort on fatal signal during sync init
When sync init is used and the server exits for some reason (error, crash) while processing FUSEINIT, the filesystem creation will hang. The reason is that while all other threads will exit, the mounting thread (or process) will keep the device fd open, which will prevent an abort from happening.
This is a regression from the async mount case, where the mount was done first, and the FUSEINIT processing afterwards, in which case there's no such recursive syscall keeping the fd open.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31713?
CVE-2026-31713 is classified as a high severity vulnerability due to its potential to cause filesystem hangs during FUSE_INIT.
How do I fix CVE-2026-31713?
To fix CVE-2026-31713, you should update your Linux kernel to a version that includes the patch for this vulnerability.
What impact does CVE-2026-31713 have on system stability?
CVE-2026-31713 can lead to system instability as it may cause the creation of filesystems to hang indefinitely under certain conditions.
Which versions of the Linux kernel are affected by CVE-2026-31713?
CVE-2026-31713 affects Linux kernel versions from 6.18 to 6.18.25 and versions from 6.19 to 7.1-rc1.
Is CVE-2026-31713 exploitable remotely?
CVE-2026-31713 is not directly exploitable remotely but can cause significant issues in environments utilizing FUSE.