{
  "affected": [
    {
      "ranges": [
        {
          "events": [
            {
              "introduced": "f8fce75fedf73ac72aa09163deb8f4291fdcaad2"
            },
            {
              "fixed": "26fbe4bc3ef3ab0200407681cbef182af5d151de"
            },
            {
              "fixed": "ed9c881f3b498383f73c42712b359419da42a7b0"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "last_affected": "1d8ecd0cd696a5df0b2f72046a4ccee5d2a8ec2c"
            },
            {
              "last_affected": "7366e6f4d2b4c7002b13fb01219e83679dad4127"
            },
            {
              "last_affected": "893479015cb6442fd389d3b553ab3036c9541715"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "6.12.96"
            },
            {
              "fixed": "6.13"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "6.18.39"
            },
            {
              "fixed": "6.19"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "7.1.4"
            },
            {
              "fixed": "7.2"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Linux",
        "name": "Kernel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "7.2.0"
            },
            {
              "fixed": "7.2.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80860.json"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nfuse: fix race between interrupt and resend\n\nAfter commit f8fce75fedf7 (\"fuse: clear intr_entry in fuse_resend and\nfuse_remove_pending_req\") the WARN_ON(!list_empty(\u0026req-\u003eintr_entry)) in\nfuse_request_free() still triggers due to the following race:\n\nIn request_wait_answer()\n  if (test_bit(FR_SENT, \u0026req-\u003eflags)) -\u003e returns true\n\nIn fuse_chan_resend()\n  clear_bit(FR_SENT, \u0026req-\u003eflags)\n\nIn request_wait_answer()\n  queue_interrupt(req)\n\nFix by:\n\n - move clearing FR_SENT inside fpq-\u003elock\n\n - move setting FR_PENDING inside fiq-\u003elock\n\n - recheck FR_SENT after acquiring fiq-\u003elock in fuse_dev_queue_interrupt()",
  "id": "CVE-2026-80860",
  "modified": "2026-09-06T03:30:39.122801266Z",
  "published": "2026-09-04T15:55:14.285Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/26fbe4bc3ef3ab0200407681cbef182af5d151de"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/ed9c881f3b498383f73c42712b359419da42a7b0"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80860.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80860"
    },
    {
      "type": "PACKAGE",
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
    }
  ],
  "schema_version": "1.9.0",
  "summary": "fuse: fix race between interrupt and resend"
}