CVE-2026-64263

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the fuse-uring component where the fuse uring cancel() function moves available entries without attached requests to the ent in userspace list. The ent list request expired() function then unconditionally dereferences ent->fuse req for the first entry on that list, which leads to a system crash when processing a cancelled entry.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.