PT-2026-64487

CVE-2026-64266

·

Published

2026-07-25

·

Updated

2026-10-26

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A use-after-free issue exists in the fuse module. The fuse ref folio() function unlocks a request but fails to re-lock it before returning. This allows fuse chan abort() to end the request, triggering an asynchronous end callback such as fuse writepage free() to free the arguments while the subsequent copy chain logic still attempts to access them.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
ALSA-2026:87374
ALSA-2026:87375
ALSA-2026:88477
ALSA-2026:90365
AZL-93740
CLSA-2026-1787292462
CLSA-2026-1787304608
CLSA-2026-1787305050
CLSA-2026-1787307395
CLSA-2026-1787571818
CLSA-2026-1787572220
CLSA-2026-1788170774
CLSA-2026-1788257079
CLSA-2026-1788259625
CLSA-2026-1789373487
CLSA-2026-1789373515
CLSA-2026-1789460387
CLSA-2026-1791946572
ECHO-DA03-5260-CC1B
OESA-2026-3316
OESA-2026-3532
OPENSUSE-SU-2026:11476-1
OPENSUSE-SU-2026:21910-1
SUSE-SU-2026:23477-1
SUSE-SU-2026:23481-1
SUSE-SU-2026:23528-1
SUSE-SU-2026:23529-1
SUSE-SU-2026:23881-1
SUSE-SU-2026:23887-1
SUSE-SU-2026:23897-1
SUSE-SU-2026:23902-1
SUSE-SU-2026:4120-1
SUSE-SU-2026:4254-1
SUSE-SU-2026:4279-1
SUSE-SU-2026:4282-1
SUSE-SU-2026:4284-1
SUSE-SU-2026:4347-1
SUSE-SU-2026:4369-1
SUSE-SU-2026:4595-1
USN-8726-1
USN-8726-2
USN-8726-3
USN-8726-4
USN-8727-1
USN-8728-1
USN-8728-2
USN-8728-3
USN-8760-1
USN-8760-2
USN-8800-1
USN-8875-1
USN-8875-2
USN-8876-1
USN-8877-1
USN-8878-1
USN-8879-1
USN-8886-1
USN-8917-1
USN-8918-1
Found an issue in the description? Have something to add? Feel free to write us 👾