{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2026-80855",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2026-80855",
    "idYear": 2026,
    "status": "PUBLISHED",
    "publishedAt": "2026-09-04T15:55:07.864Z",
    "updatedAt": "2026-10-19T08:44:49.307Z",
    "importedAt": "2026-10-24T01:58:30.346Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "fuse: fix invalidate lock leak on open O_TRUNC DAX failure",
      "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nfuse: fix invalidate lock leak on open O_TRUNC DAX failure\n\nfuse_open() takes filemap_invalidate_lock() for a DAX truncate\n(dax_truncate = true) and releases it before the out_inode_unlock\nlabel.  But when fuse_dax_break_layouts() fails, the goto\nout_inode_unlock skips the unlock and leaks the rwsem, so any later\nfault or truncate on the file stalls on the stale lock.\n\nfuse_dax_break_layouts() can fail with -ERESTARTSYS when a signal\ninterrupts the wait for busy DAX pages to drain:\n\n  open(\"file\", O_RDWR | O_TRUNC)\n  └─ fuse_open()\n     ├─ filemap_invalidate_lock()        # dax_truncate\n     └─ fuse_dax_break_layouts()\n        └─ dax_break_layout()\n           └─ wait_page_idle()           # TASK_INTERRUPTIBLE\n              └─ fuse_wait_dax_page()    # unlock, schedule, re-lock\n                 └─ signal → -ERESTARTSYS\n     goto out_inode_unlock               # <- lock leaked\n\nFix this by moving filemap_invalidate_unlock() below the label so\nthat all error paths release the lock, and rename the label to\nout_unlock as it now covers more than just the inode lock.",
      "affected": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "d58366aab86854217b81679d1a9dcd54a2edfc2a",
              "status": "affected",
              "versionType": "git",
              "lessThan": "1b04d80a27d317064cce2307472f5bef9975bc50"
            },
            {
              "version": "2fdbb8dd01556e1501132b5ad3826e8f71e24a8b",
              "status": "affected",
              "versionType": "git",
              "lessThan": "a61524da59a2f5ac9c8de23ff98b30da769ab144"
            },
            {
              "version": "2fdbb8dd01556e1501132b5ad3826e8f71e24a8b",
              "status": "affected",
              "versionType": "git",
              "lessThan": "dcf30a56624c2a0cfab1bada5b1ca8cc0c02f010"
            },
            {
              "version": "2fdbb8dd01556e1501132b5ad3826e8f71e24a8b",
              "status": "affected",
              "versionType": "git",
              "lessThan": "7288c279ddbd654a06c82118c1a3f5570c1807f0"
            },
            {
              "version": "2fdbb8dd01556e1501132b5ad3826e8f71e24a8b",
              "status": "affected",
              "versionType": "git",
              "lessThan": "776e85fda752f9a15e0f82dec42ecacd12a9bd94"
            },
            {
              "version": "2fdbb8dd01556e1501132b5ad3826e8f71e24a8b",
              "status": "affected",
              "versionType": "git",
              "lessThan": "1d3e701cda2f41d48aa721b3ebefbe0fbf8d74da"
            },
            {
              "version": "2fdbb8dd01556e1501132b5ad3826e8f71e24a8b",
              "status": "affected",
              "versionType": "git",
              "lessThan": "e981474d7bf1457da12404e169ea147d2c8ecea7"
            },
            {
              "version": "2fdbb8dd01556e1501132b5ad3826e8f71e24a8b",
              "status": "affected",
              "versionType": "git",
              "lessThan": "a927f1867e61b78f39f9da0bbba3c98c2ca151fe"
            },
            {
              "version": "81775ab858b4236c52c5da7e25cec6e49dd91b46",
              "status": "affected",
              "versionType": "git"
            },
            {
              "version": "b57e150ac2eac791d5d187923b73dc2dafaf67fa",
              "status": "affected",
              "versionType": "git"
            },
            {
              "version": "1fdbbe246daf348adaa0739463384b16ceba1fc0",
              "status": "affected",
              "versionType": "git"
            },
            {
              "version": "5.15.109",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "5.15.220"
            },
            {
              "version": "5.10.179",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "5.11"
            },
            {
              "version": "5.18.18",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "5.19"
            },
            {
              "version": "5.19.2",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "5.20"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "6.0",
              "status": "affected"
            },
            {
              "version": "0",
              "status": "unaffected",
              "versionType": "semver",
              "lessThan": "6.0"
            },
            {
              "version": "5.15.220",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "version": "6.1.187",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "version": "6.6.156",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "version": "6.12.108",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "version": "6.18.49",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "version": "7.1.13",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "7.1.*"
            },
            {
              "version": "7.2.3",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "7.2.*"
            },
            {
              "version": "7.3",
              "status": "unaffected",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ]
        }
      ]
    }
  }
}