In the Linux kernel, the following vulnerability has been resolved: fuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues… (CVE-2026-64261)
A use-after-free vulnerability was identified and resolved in the Linux kernel's fuse-uring component. The issue occurred because fuse_uring_async_stop_queues() could execute after the last reference on ring->queue_refs was dropped, potentially leading to early destruction of a fuse_conn structure. The fix involves taking an additional reference on struct fuse_conn before starting fuse_uring_async_stop_queues(), which is only released after the delayed work queue terminates.
AI Analysis
Technical Summary
The vulnerability in the Linux kernel's fuse-uring subsystem involved a use-after-free condition in the function fuse_uring_async_stop_queues(). This function might run after the last reference on ring->queue_refs was released, risking access to freed memory. The resolution was to hold a reference on the fuse_conn structure before initiating fuse_uring_async_stop_queues(), ensuring the structure remains valid until the delayed work queue completes and the reference is released.
Potential Impact
The vulnerability could lead to use-after-free memory access within the kernel, which may cause system instability or potential escalation of privileges if exploited. However, no known exploits in the wild have been reported for this issue.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this vulnerability by managing references correctly in fuse_uring_async_stop_queues(). Users should update to the fixed kernel versions once available. Patch status is not yet confirmed from vendor advisories; users should monitor official Linux kernel releases for the fix.
In the Linux kernel, the following vulnerability has been resolved: fuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues… (CVE-2026-64261)
Description
A use-after-free vulnerability was identified and resolved in the Linux kernel's fuse-uring component. The issue occurred because fuse_uring_async_stop_queues() could execute after the last reference on ring->queue_refs was dropped, potentially leading to early destruction of a fuse_conn structure. The fix involves taking an additional reference on struct fuse_conn before starting fuse_uring_async_stop_queues(), which is only released after the delayed work queue terminates.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in the Linux kernel's fuse-uring subsystem involved a use-after-free condition in the function fuse_uring_async_stop_queues(). This function might run after the last reference on ring->queue_refs was released, risking access to freed memory. The resolution was to hold a reference on the fuse_conn structure before initiating fuse_uring_async_stop_queues(), ensuring the structure remains valid until the delayed work queue completes and the reference is released.
Potential Impact
The vulnerability could lead to use-after-free memory access within the kernel, which may cause system instability or potential escalation of privileges if exploited. However, no known exploits in the wild have been reported for this issue.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this vulnerability by managing references correctly in fuse_uring_async_stop_queues(). Users should update to the fixed kernel versions once available. Patch status is not yet confirmed from vendor advisories; users should monitor official Linux kernel releases for the fix.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-49p8-h7pf-grwp
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64261"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a65420f9c2644c7f8086c55
Added to database: 07/25/2026, 23:09:03 UTC
Last enriched: 07/25/2026, 23:43:54 UTC
Last updated: 07/26/2026, 06:17:59 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.