Live › vulnerability › CVE-2026-58829
A use-after-free in the FUSE backing-file mmap path (fuse_backing_mmap in backing.c) causes memory corruption. A local user with no extra privileges can use it to escalate to higher privileges.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 20:35 UTC. All times on this page are UTC.
Systems running a kernel with the FUSE backing-file feature where local users can run code. The sources do not list affected kernel versions or whether the feature must be enabled. Systems without untrusted local users are lower risk.
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In fuse_backing_mmap of backing.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
This page as .md · .json · in your agent: get_signal("CVE-2026-58829")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.