CVE-2026-64588

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A data race exists in the fuse-uring component on weakly-ordered architectures. The store to fiq->ops can be reordered after the store to ring->ready, which may allow a CPU to dispatch requests using a stale fiq->ops pointer if ring->ready is observed as true via the fuse uring ready() function. Additionally, a marked-vs-unmarked access occurs because fuse uring do register() uses WRITE ONCE() to publish ring->ready while the fast-path check uses a plain load. There is also a risk of the compiler reloading fc->ring in fuse uring ready() between the NULL check and the dereference.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.