CVE-2026-64258

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL dereference issue exists in the fuse-uring component. When a copy into the userspace ring buffer fails, the fuse uring req end() function sets ent->fuse req to NULL but leaves the entry on the ent w req queue in the FRRS FUSE REQ state. This creates a window where the request expiration logic scanning the ent w req queue can trigger a NULL dereference.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.