CVE-2026-43474

MEDIUM EPSS 1.7%
Published May 8, 20261mo ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published May 8, 2026 1mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: fs: init flags_valid before calling vfs_fileattr_get syzbot reported a uninit-value bug in [1]. Similar to the "*get" context where the kernel's internal file_kattr structure is initialized before calling vfs_fileattr_get(), we should use the same mechanism when using fa. [1] BUG: KMSAN: uninit-value in fuse_fileattr_get+0xeb4/0x1450 fs/fuse/ioctl.c:517 fuse_fileattr_get+0xeb4/0x1450 fs/fuse/ioctl.c:517 vfs_fileattr_get fs/file_attr.c:94 [inline] __do_sys_file_getattr fs/file_attr.c:416 [inline] Local variable fa.i created at: __do_sys_file_getattr fs/file_attr.c:380 [inline] __se_sys_file_getattr+0x8c/0xbd0 fs/file_attr.c:372

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
1.7% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-908

Affected Products 3

VendorProductVersionRange
linuxlinux_kernel*≥6.17  –  <6.18.19
linuxlinux_kernel*≥6.19  –  <6.19.9
linuxlinux_kernel7.0any

References 3

  • git.kernel.org https://git.kernel.org/stable/c/379e19e820dd1c6145426b97467728b3b89c0b42
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b8c182b2c8c44c6016b11d8af61715ad7ef958a1
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/cb184dd19154fc486fa3d9e02afe70a97e54e055
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/379e19e820dd1c6145426b97467728b3b89c0b42
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b8c182b2c8c44c6016b11d8af61715ad7ef958a1
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/cb184dd19154fc486fa3d9e02afe70a97e54e055
    Patch