CVE-2024-38626

A flaw was found in the Linux kernel's FUSE (Filesystem in Userspace) subsystem. When requests are returned to the pending queue following a resend notification, an internal transmission flag is not properly cleared. A local user can exploit this issue by triggering a failed read operation on the re-queued request, leading to an unexpected state and causing a Denial of Service (DoS) through a kernel warning or crash.

This vulnerability has been rated as Low impact because exploitation is constrained to local users with access to the FUSE interface and leads only to a denial of service or kernel warning without impacting data confidentiality or integrity. Supported Red Hat Enterprise Linux kernels do not incorporate the upstream commit that introduced this resend notification behavior, leaving standard enterprise deployments unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.