CVE-2026-80899

In the Linux kernel, the following vulnerability has been resolved: erofs: remove fscache backend entirely EROFS over fscache was introduced to provide image lazy pulling functionality. After the feature landed, the fscache subsystem made netfs a new hard dependency, which is unexpected for a local filesystem and has an kernel-defined caching hierarchy which could be inflexible compared to the fanotify pre-content hooks. Therefore, this feature has been deprecated for almost two years. As EROFS file-backed mounts and fanotify pre-content hooks both upstream for a while and already providing equivalent functionality (erofs-utils has supported fanotify pre-content hooks), let's remove the fscache backend now. The main application of this feature is Nydus [1], and they plan to move to use fanotify pre-content hooks in the near future too. I hope this patch can be merged into Linux 7.2, which is also motivated by newly found implementation issues [2][3] that are not worth investigating given the deprecation and limited development resources. The associated fscache/cachefiles cleanup patch will follow separately through the vfs tree (netfs) later: it seems fine since the codebase is isolated by CONFIG_CACHEFILES_ONDEMAND. [1] https://github.com/dragonflyoss/nydus/blob/v2.1.0/docs/nydus-fscache.md [2] https://github.com/dragonflyoss/nydus/pull/1824 [3] https://lore.kernel.org/r/20260619135800.1594811-1-michael.bommarito@gmail.com

• https://git.kernel.org/stable/c/c37460cd9b2fcb61ec66b7eb4fde737e65ec2a56
• https://git.kernel.org/stable/c/f6145794f17a27d25f8a84edb80731fb0e07c196

Published

Sep 4, 2026

Last Modified

Sep 7, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-80893In the Linux kernel, the following vulnerability has been re…
• CVE-2026-80894In the Linux kernel, the following vulnerability has been re…
• CVE-2026-80895In the Linux kernel, the following vulnerability has been re…
• CVE-2026-80896In the Linux kernel, the following vulnerability has been re…
• CVE-2026-80897In the Linux kernel, the following vulnerability has been re…
• CVE-2026-80898In the Linux kernel, the following vulnerability has been re…
• CVE-2026-8090Use-after-free in the DOM: Networking component. This vulner…7.3
• CVE-2026-80900In the Linux kernel, the following vulnerability has been re…
• CVE-2026-80901In the Linux kernel, the following vulnerability has been re…
• CVE-2026-80902In the Linux kernel, the following vulnerability has been re…
• CVE-2026-80903In the Linux kernel, the following vulnerability has been re…
• CVE-2026-80904In the Linux kernel, the following vulnerability has been re…