CVE-2026-64263

A flaw was found in the Linux kernel's fuse-uring component. This vulnerability arises from the incorrect handling of cancelled entries, which are moved to a list where a subsequent operation unconditionally attempts to access a null pointer. A local attacker could exploit this flaw to trigger a...

CVE-2026-64263 fuse-uring: fix moving cancelled entry to ent_in_userspace list

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix moving cancelled entry to entinuserspace list fuseuringcancel moves entries that are available these have no reqs attached to the entinuserspace list. entlistrequestexpired checks the first entry on entinuserspace...