In the Linux kernel, the following vulnerability has been resolved: fuse: reject fuse_notify() pagecache ops on directories The operations… (CVE-2026-53168)
In the Linux kernel, the following vulnerability has been resolved: fuse: reject fuse_notify() pagecache ops on directories The operations FUSE_NOTIFY_STORE and FUSE_NOTIFY_RETRIEVE allow the FUSE daemon to actively write/read pagecache contents. For directories with FOPEN_CACHE_DIR, the pagecache is used as kernel-internal cache storage, and userspace is not supposed to have direct access to this cache - in particular, fuse_parse_cache() will hit WARN_ON() if the cache contains bogus data. Reject FUSE_NOTIFY_STORE and FUSE_NOTIFY_RETRIEVE on anything other than regular files with -EINVAL.
AI Analysis
Technical Summary
The vulnerability (CVE-2026-53168) in the Linux kernel's FUSE implementation involved the improper acceptance of FUSE_NOTIFY_STORE and FUSE_NOTIFY_RETRIEVE operations on directories. These operations allow the FUSE daemon to manipulate pagecache contents, but for directories with FOPEN_CACHE_DIR, the pagecache is used internally by the kernel and should not be accessible by userspace. Accepting these operations on directories could cause kernel warnings (WARN_ON) due to bogus cache data. The fix rejects these operations on non-regular files with an error (-EINVAL), preventing misuse.
Potential Impact
The vulnerability does not affect confidentiality or integrity but impacts availability by potentially causing kernel warnings and instability due to improper pagecache manipulation on directories. There is no indication of exploitation in the wild or direct data compromise.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vulnerability description states it has been resolved, implying an official fix exists. Users should apply the official Linux kernel updates that include this fix once available.
In the Linux kernel, the following vulnerability has been resolved: fuse: reject fuse_notify() pagecache ops on directories The operations… (CVE-2026-53168)
Description
In the Linux kernel, the following vulnerability has been resolved: fuse: reject fuse_notify() pagecache ops on directories The operations FUSE_NOTIFY_STORE and FUSE_NOTIFY_RETRIEVE allow the FUSE daemon to actively write/read pagecache contents. For directories with FOPEN_CACHE_DIR, the pagecache is used as kernel-internal cache storage, and userspace is not supposed to have direct access to this cache - in particular, fuse_parse_cache() will hit WARN_ON() if the cache contains bogus data. Reject FUSE_NOTIFY_STORE and FUSE_NOTIFY_RETRIEVE on anything other than regular files with -EINVAL.
CVSS v3.1
Score 5.5medium
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability (CVE-2026-53168) in the Linux kernel's FUSE implementation involved the improper acceptance of FUSE_NOTIFY_STORE and FUSE_NOTIFY_RETRIEVE operations on directories. These operations allow the FUSE daemon to manipulate pagecache contents, but for directories with FOPEN_CACHE_DIR, the pagecache is used internally by the kernel and should not be accessible by userspace. Accepting these operations on directories could cause kernel warnings (WARN_ON) due to bogus cache data. The fix rejects these operations on non-regular files with an error (-EINVAL), preventing misuse.
Potential Impact
The vulnerability does not affect confidentiality or integrity but impacts availability by potentially causing kernel warnings and instability due to improper pagecache manipulation on directories. There is no indication of exploitation in the wild or direct data compromise.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vulnerability description states it has been resolved, implying an official fix exists. Users should apply the official Linux kernel updates that include this fix once available.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_vex
- Csaf Version
- 2.0
- Publisher
- Microsoft Security Response Center
- Advisory Id
- msrc_CVE-2026-53168
- Cve Count
- 1
- Additional Cves
- []
- Cvss Version
- 3.1
Threat ID: 6a42ed8527e9c79719953df0
Added to database: 06/29/2026, 22:11:17 UTC
Last enriched: 07/06/2026, 23:47:30 UTC
Last updated: 07/31/2026, 19:24:47 UTC
Views: 21
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.