CVE-2026-64260
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
25/07/2026
Last modified:
30/07/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
fuse-uring: Avoid queue->stopped races and set/read that value under lock<br />
<br />
There are several readers of queue->stopped that check the value<br />
under lock, but fuse_uring_commit_fetch() did not and actually<br />
the value was not set under the lock in fuse_uring_abort_end_requests()<br />
either. Especially in fuse_uring_commit_fetch it is important<br />
to check under a lock, because due to races &#39;struct fuse_req&#39;<br />
might be freed with fuse_request_end, but another thread/cpu<br />
might already do teardown work.
Impact
Base Score 3.x
7.80
Severity 3.x
HIGH