CVE-2026-53168

A flaw was found in the Linux kernel's Filesystem in Userspace (FUSE) component. The fuse_notify() function, specifically the FUSE_NOTIFY_STORE and FUSE_NOTIFY_RETRIEVE operations, allows the FUSE daemon to write or read pagecache contents. When these operations are performed on directories configured with FOPEN_CACHE_DIR, userspace can improperly access and manipulate kernel-internal cache storage. This could lead to system instability or a denial of service if the cache contains invalid data, potentially triggering a kernel warning.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.