Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: fuse-uring: make a fuse_req on SQE commit only findable after memcpy Bad… (CVE-2026-64259)
A vulnerability in the Linux kernel's fuse-uring subsystem was fixed to prevent a use-after-free condition caused by improper handling of commit submission queue entries (SQEs). Malicious userspace could exploit this flaw by sending commit SQEs with request identifiers not yet processed by the fuse server, potentially causing memory corruption. The fix involves reordering operations to ensure requests cannot be found until preparation is complete, preventing race conditions. This issue is part of a broader set of Linux kernel security fixes released in Ubuntu kernel updates.
AI Analysis
Technical Summary
The vulnerability in the Linux kernel fuse-uring subsystem allowed malicious userspace to send commit SQEs with unique request IDs that were not yet sent to the fuse server, leading to a use-after-free condition during memcpy operations in fuse_uring_send_in_task(). The patch moves the call to fuse_uring_add_to_pq() after the copy operations and just before completing the io-uring request, preventing malicious userspace from finding the request prematurely and avoiding race conditions. This fix is included in Ubuntu kernel updates for linux-hwe-edge and other kernel variants.
Potential Impact
Exploitation of this vulnerability could lead to use-after-free memory corruption, potentially allowing local attackers to escalate privileges or cause denial of service. The CVSS score of 7.8 indicates high impact on confidentiality, integrity, and availability. However, no known exploits are reported in the wild at this time.
Mitigation Recommendations
A patch is available and included in updated Linux kernel packages for Ubuntu 24.04 LTS and related releases. Users should apply the kernel updates provided by their distribution and reboot systems to complete remediation. Due to an ABI change, recompilation and reinstallation of third-party kernel modules may be required. No additional mitigation steps are indicated beyond applying the official updates.
Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: fuse-uring: make a fuse_req on SQE commit only findable after memcpy Bad… (CVE-2026-64259)
Description
A vulnerability in the Linux kernel's fuse-uring subsystem was fixed to prevent a use-after-free condition caused by improper handling of commit submission queue entries (SQEs). Malicious userspace could exploit this flaw by sending commit SQEs with request identifiers not yet processed by the fuse server, potentially causing memory corruption. The fix involves reordering operations to ensure requests cannot be found until preparation is complete, preventing race conditions. This issue is part of a broader set of Linux kernel security fixes released in Ubuntu kernel updates.
CVSS v3.1
Score 7.8high
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in the Linux kernel fuse-uring subsystem allowed malicious userspace to send commit SQEs with unique request IDs that were not yet sent to the fuse server, leading to a use-after-free condition during memcpy operations in fuse_uring_send_in_task(). The patch moves the call to fuse_uring_add_to_pq() after the copy operations and just before completing the io-uring request, preventing malicious userspace from finding the request prematurely and avoiding race conditions. This fix is included in Ubuntu kernel updates for linux-hwe-edge and other kernel variants.
Potential Impact
Exploitation of this vulnerability could lead to use-after-free memory corruption, potentially allowing local attackers to escalate privileges or cause denial of service. The CVSS score of 7.8 indicates high impact on confidentiality, integrity, and availability. However, no known exploits are reported in the wild at this time.
Mitigation Recommendations
A patch is available and included in updated Linux kernel packages for Ubuntu 24.04 LTS and related releases. Users should apply the kernel updates provided by their distribution and reboot systems to complete remediation. Due to an ABI change, recompilation and reinstallation of third-party kernel modules may be required. No additional mitigation steps are indicated beyond applying the official updates.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-6vp8-rvj5-gc8c
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64259"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a65420f9c2644c7f8086c4f
Added to database: 07/25/2026, 23:09:03 UTC
Last enriched: 09/07/2026, 18:15:48 UTC
Last updated: 09/07/2026, 22:52:14 UTC
Views: 53
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.