CVE-2026-43474

kernel: fs: init flags_valid before calling vfs_fileattr_get

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 8, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's fuse filesystem. A local user could exploit an uninitialized value vulnerability when calling vfs_fileattr_get. This could potentially lead to information disclosure or system instability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-908 · Use of Uninitialized Resource