CVE-2026-64261 — fuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues
In the Linux kernel, the following vulnerability has been resolved: fuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues fuse_uring_async_stop_queues() might run w…
Published: 2026-07-25 · CVSS: 7.8 · CVSS 3.1
In the Linux kernel, the following vulnerability has been resolved: fuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues fuse_uring_async_stop_queues() might run when the last reference on ring->queue_refs was already dropped. In order to avoid an early destruction a reference on struct fuse_conn is now taken before starting fuse_uring_async_stop_queues() and that reference is only released when that delayed work queue terminates.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7