Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: fuse: wait for FR_FINISHED on abort_on_kill to prevent use-after-free The… (CVE-2026-80857)

The vulnerability in the Linux kernel's FUSE subsystem involves the abort_on_kill path in the request_wait_answer() function, which calls fuse_abort_conn() and returns without waiting for the FR_FINISHED event. If fuse_dev_do_write() is concurrently processing the same request with FR_LOCKED set, the request arguments (req->args) may be freed while still in use, causing a use-after-free condition. The fix involves changing the code to wait on the FR_FINISHED event instead of returning early, ensuring that all requests are properly ended before memory is freed.

This use-after-free vulnerability could lead to memory corruption or kernel instability if exploited. However, no known exploits are reported in the wild. The impact is limited to the Linux kernel's FUSE subsystem and could affect systems using FUSE for filesystem operations.

A fix has been implemented in the Linux kernel to address this vulnerability by modifying the abort_on_kill path to wait for the FR_FINISHED event before freeing memory. Users should apply the official kernel updates that include this fix when available. Patch status is not yet confirmed in the provided data; check the vendor advisory for current remediation guidance.