PT-2025-39505 · Crates.Io · Fuser

Publicado 2025-09-15 · Atualizado 2025-09-15

OSV

CVSS v4.0

8.2

Alta

Vetor base

AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

During the creation of a new libfuse session with fuse session new, the operation list was passed as NULL incorrectly. libfuse expects this argument to always point to list of operations. This caused uninitialized memory read and leaks in libfuse.so.

Correção

Use of Uninitialized Resource

Enumeração de Fraquezas

CWE-908

Identificadores relacionados

GHSA-CVMJ-47V9-35M9

Produtos afetados

Fuser

Referências · 4

• https://github.com/cberner/fuser/pull/390 · Nota
• https://github.com/cberner/fuser · Nota
• https://osv.dev/vulnerability/GHSA-cvmj-47v9-35m9 · Aviso do Fabricante
• https://rustsec.org/advisories/RUSTSEC-2021-0154.html · Nota