PT-2026-36343 · Linux · Linux Kernel

Published 2026-05-01 · Updated 2026-05-16 · CVE-2026-31713

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the FUSE (Filesystem in Userspace) component where the filesystem creation process can hang if the server exits due to an error or crash while processing FUSE INIT during sync init. This occurs because the mounting thread maintains the device file descriptor open, preventing the necessary abort sequence from triggering. This behavior is a regression from the async mount process, where the mount is completed before FUSE INIT is processed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-31713

OPENSUSE-SU-2026:10793-1

Affected Products

Linux Kernel

References · 48

• https://security-tracker.debian.org/tracker/CVE-2026-31713 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31713 · Vendor Advisory
• https://git.kernel.org/stable/c/300e812b882a174dca675d8028684001ad5826bc · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31713 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10793-1 · Vendor Advisory
• https://git.kernel.org/stable/c/204aa22a686bfee48daca7db620c1e017615f2ff · Patch
• https://git.kernel.org/stable/c/0c7fca880a40a209a9c92be14143996d14b93ff6 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31713 · Security Note
• https://ubuntu.com/security/CVE-2026-31713 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-31713 · Security Note
• https://suse.com/security/cve/CVE-2026-43500 · Note
• https://suse.com/security/cve/CVE-2026-31700 · Note
• https://suse.com/security/cve/CVE-2026-31714 · Note
• https://suse.com/security/cve/CVE-2026-43073 · Note
• https://suse.com/security/cve/CVE-2026-43284 · Note