7.8
CVSS 3.1
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се локално, без особени условия, с обикновен потребителски вход и без действие от потребителя.
Описание
Оригинално описание
In the Linux kernel, the following vulnerability has been resolved: fuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues fuse_uring_async_stop_queues() might run when the last reference on ring->queue_refs was already dropped. In order to avoid an early destruction a reference on struct fuse_conn is now taken before starting fuse_uring_async_stop_queues() and that reference is only released when that delayed work queue terminates.
Засегнати продукти
- Linux Linux: 4a9bfb9b6850fec0685447aed280533cf980de70 преди 23a356e0bd96c8d5fb3ddff069f692bf10cab5c1; 4a9bfb9b6850fec0685447aed280533cf980de70 преди 95d7f50aff2a5f71557263ff25b97b2951f32bf8; 4a9bfb9b6850fec0685447aed280533cf980de70 преди d351da75066955144515cb2f9aa959f24a04287a
- Linux Linux: 6.14; преди 6.14; 6.18.39 до 6.18.*; 7.1.4 до 7.1.*; 7.2 до *
История
- 25 юли 2026 Публикувано
Други уязвимости в Linux Linux
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-64261
- https://nvd.nist.gov/vuln/detail/CVE-2026-64261
- https://git.kernel.org/stable/c/23a356e0bd96c8d5fb3ddff069f692bf10cab5c1
- https://git.kernel.org/stable/c/95d7f50aff2a5f71557263ff25b97b2951f32bf8
- https://git.kernel.org/stable/c/d351da75066955144515cb2f9aa959f24a04287a