CVE-2026-64261

Analyzed Analyzed - Analysis Complete

Use-After-Free in Linux Kernel fuse-uring

Publication date: 2026-07-25

Last updated on: 2026-08-12

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues fuse_uring_async_stop_queues() might run when the last reference on ring->queue_refs was already dropped. In order to avoid an early destruction a reference on struct fuse_conn is now taken before starting fuse_uring_async_stop_queues() and that reference is only released when that delayed work queue terminates.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-25

Last Modified

2026-08-12

Generated

2026-08-14

AI Q&A

2026-07-25

EPSS Evaluated

2026-08-13

NVD

CVE-2026-64261

EUVD

EUVD-2026-48973

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 6.19 (inc) to 7.1.4 (exc)
linux	linux_kernel	From 6.14 (inc) to 6.18.39 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-416	The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

Executive Summary

This is a use-after-free vulnerability in the Linux kernel's fuse-uring component. It occurs when fuse_uring_async_stop_queues() runs after the last reference to ring->queue_refs is dropped, potentially leading to early destruction of memory while still in use.

Detection Guidance

This vulnerability is specific to the Linux kernel's fuse-uring component and involves a use-after-free issue in fuse_uring_async_stop_queues. Detection requires checking kernel logs for related errors or crashes involving fuse or uring operations.

Impact Analysis

This vulnerability could cause system crashes, data corruption, or privilege escalation if exploited. It affects systems using the FUSE (Filesystem in Userspace) with io_uring functionality, potentially leading to denial-of-service conditions or unauthorized access.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it is a low-level kernel issue related to memory management in the FUSE subsystem. No evidence suggests it impacts data protection, privacy, or security controls required by these regulations.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve the use-after-free issue in fuse_uring_async_stop_queues.

Hi! I’m here to help you understand CVE-2026-64261. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70