CVE-2026-64260

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the fuse-uring component. The fuse uring commit fetch() function fails to check the queue->stopped value under a lock, and the fuse uring abort end requests() function does not set this value under a lock. This can lead to a situation where struct fuse req is freed via fuse request end while another thread or CPU is simultaneously performing teardown work.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.