CVE-2026-64260
Gravedad CVSS v3.1:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
25/07/2026
Última modificación:
30/07/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
fuse-uring: Avoid queue->stopped races and set/read that value under lock<br />
<br />
There are several readers of queue->stopped that check the value<br />
under lock, but fuse_uring_commit_fetch() did not and actually<br />
the value was not set under the lock in fuse_uring_abort_end_requests()<br />
either. Especially in fuse_uring_commit_fetch it is important<br />
to check under a lock, because due to races &#39;struct fuse_req&#39;<br />
might be freed with fuse_request_end, but another thread/cpu<br />
might already do teardown work.
Impacto
Puntuación base 3.x
7.80
Gravedad 3.x
ALTA