Riskcovery

CVE-2026-64261

fuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues

State
Published
Severity
7.8 High
Published
Jul 25, 2026
Updated
Aug 17, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

fuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues

fuse_uring_async_stop_queues() might run when the last reference on ring->queue_refs was already dropped.

In order to avoid an early destruction a reference on struct fuse_conn is now taken before starting fuse_uring_async_stop_queues() and that reference is only released when that delayed work queue terminates.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4a9bfb9b6850fec0685447aed280533cf980de70 to before 23a356e0bd96c8d5fb3ddff069f692bf10cab5c1Affected
  • 4a9bfb9b6850fec0685447aed280533cf980de70 to before 95d7f50aff2a5f71557263ff25b97b2951f32bf8Affected
  • 4a9bfb9b6850fec0685447aed280533cf980de70 to before d351da75066955144515cb2f9aa959f24a04287aAffected
LinuxLinux
  • 6.14Affected
  • before 6.14Not affected
  • 6.18.39 through 6.18.*Not affected
  • 7.1.4 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.