FUSE: Multiple Vulnerabilities

FUSE: Multiple Vulnerabilities Multiple vulnerabilities have been found in FUSE, the worst of which can lead to code execution. fuse 2026-04-17 2026-04-17 971552 remote 3.18.1 3.18.1

FUSE (Filesystem in Userspace) is an interface for userspace programs to export a filesystem to the Linux kernel.

The following vulnerabilities have been discovered in FUSE: a NULL pointer dereference (when running with the NUMA architecture) and a use-after-free. The worst of which can lead to code execution. Please review the CVE identifiers referenced below for details.

The following is a possible outcome: denial of service (crash) and potential code execution.

There is no known workaround at this time.

All FUSE users should upgrade to the latest version:


          # emerge --sync
          # emerge --ask --oneshot --verbose ">=sys-fs/fuse-3.18.1:3"

CVE-2026-33150 CVE-2026-33179 csfore csfore