In the Linux kernel, the following vulnerability has been resolved: fuse: fix uninit-value in fuse_dentry_revalidate() fuse_dentry_revalidate() may… (CVE-2026-53311)
In the Linux kernel, the following vulnerability has been resolved: fuse: fix uninit-value in fuse_dentry_revalidate() fuse_dentry_revalidate() may be called with a dentry that didn't had ->d_time initialised. The issue was found with KMSAN, where lookup_open() calls __d_alloc(), followed by d_revalidate(), as shown below: ===================================================== BUG: KMSAN: uninit-value in fuse_dentry_revalidate+0x150/0x13d0 fs/fuse/dir.c:394 fuse_dentry_revalidate+0x150/0x13d0 fs/fuse/dir.c:394 d_revalidate fs/namei.c:1030 [inline] lookup_open fs/namei.c:4405 [inline] open_last_lookups fs/namei.c:4583 [inline] path_openat+0x1614/0x64c0 fs/namei.c:4827 do_file_open+0x2aa/0x680 fs/namei.c:4859 [...] Uninit was created at: slab_post_alloc_hook mm/slub.c:4466 [inline] slab_alloc_node mm/slub.c:4788 [inline] kmem_cache_alloc_lru_noprof+0x382/0x1280 mm/slub.c:4807 __d_alloc+0x55/0xa00 fs/dcache.c:1740 d_alloc_parallel+0x99/0x2740 fs/dcache.c:2604 lookup_open fs/namei.c:4398 [inline] open_last_lookups fs/namei.c:4583 [inline] path_openat+0x135f/0x64c0 fs/namei.c:4827 do_file_open+0x2aa/0x680 fs/namei.c:4859 [...] =====================================================
AI Analysis
Technical Summary
The Linux kernel's FUSE filesystem had a flaw where fuse_dentry_revalidate() could operate on a dentry whose d_time field was not initialized. This was discovered through KMSAN reports showing uninitialized value usage during file lookup and open operations involving dentry allocation and revalidation. The root cause was that lookup_open() calls __d_alloc() followed by d_revalidate(), but the d_time field was not properly initialized before use. This vulnerability is tracked as CVE-2026-53311 and categorized under CWE-908 (Use of Uninitialized Variable).
Potential Impact
The vulnerability does not affect confidentiality or integrity but has an impact on availability, as indicated by the CVSS vector (Availability: High). It may cause system crashes or instability due to use of uninitialized memory in the kernel's FUSE filesystem code. There are no known exploits in the wild.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch links are provided in the data. Users should monitor Linux kernel updates and apply any official fixes addressing this issue once available.
In the Linux kernel, the following vulnerability has been resolved: fuse: fix uninit-value in fuse_dentry_revalidate() fuse_dentry_revalidate() may… (CVE-2026-53311)
Description
In the Linux kernel, the following vulnerability has been resolved: fuse: fix uninit-value in fuse_dentry_revalidate() fuse_dentry_revalidate() may be called with a dentry that didn't had ->d_time initialised. The issue was found with KMSAN, where lookup_open() calls __d_alloc(), followed by d_revalidate(), as shown below: ===================================================== BUG: KMSAN: uninit-value in fuse_dentry_revalidate+0x150/0x13d0 fs/fuse/dir.c:394 fuse_dentry_revalidate+0x150/0x13d0 fs/fuse/dir.c:394 d_revalidate fs/namei.c:1030 [inline] lookup_open fs/namei.c:4405 [inline] open_last_lookups fs/namei.c:4583 [inline] path_openat+0x1614/0x64c0 fs/namei.c:4827 do_file_open+0x2aa/0x680 fs/namei.c:4859 [...] Uninit was created at: slab_post_alloc_hook mm/slub.c:4466 [inline] slab_alloc_node mm/slub.c:4788 [inline] kmem_cache_alloc_lru_noprof+0x382/0x1280 mm/slub.c:4807 __d_alloc+0x55/0xa00 fs/dcache.c:1740 d_alloc_parallel+0x99/0x2740 fs/dcache.c:2604 lookup_open fs/namei.c:4398 [inline] open_last_lookups fs/namei.c:4583 [inline] path_openat+0x135f/0x64c0 fs/namei.c:4827 do_file_open+0x2aa/0x680 fs/namei.c:4859 [...] =====================================================
CVSS v3.1
Score 5.5medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel's FUSE filesystem had a flaw where fuse_dentry_revalidate() could operate on a dentry whose d_time field was not initialized. This was discovered through KMSAN reports showing uninitialized value usage during file lookup and open operations involving dentry allocation and revalidation. The root cause was that lookup_open() calls __d_alloc() followed by d_revalidate(), but the d_time field was not properly initialized before use. This vulnerability is tracked as CVE-2026-53311 and categorized under CWE-908 (Use of Uninitialized Variable).
Potential Impact
The vulnerability does not affect confidentiality or integrity but has an impact on availability, as indicated by the CVSS vector (Availability: High). It may cause system crashes or instability due to use of uninitialized memory in the kernel's FUSE filesystem code. There are no known exploits in the wild.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch links are provided in the data. Users should monitor Linux kernel updates and apply any official fixes addressing this issue once available.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-32q2-cq6r-mpm8
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-53311"]
- Ecosystems
- []
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
Threat ID: 6a4c33fe27e9c797195f445b
Added to database: 07/06/2026, 23:02:22 UTC
Last enriched: 07/06/2026, 23:09:44 UTC
Last updated: 07/31/2026, 19:24:46 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.