CVE-2026-64260
Description
A flaw was found in the fuse-uring component of the Linux kernel. A race condition exists where the queue->stopped flag is not consistently checked under a lock. This can allow a struct fuse_req to be prematurely freed while other operations are still in progress, potentially leading to memory corruption. A local attacker could exploit this vulnerability to cause system instability or potentially escalate privileges.
Understanding the Weakness (CWE)
Integrity,Availability
Technical Impact: Modify Application Data; DoS: Instability; DoS: Crash, Exit, or Restart
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
