CVE-2026-64261

A flaw was found in the Linux kernel's fuse-uring component. This use-after-free vulnerability allows a local attacker to potentially achieve privilege escalation. The issue arises when the fuse_uring_async_stop_queues() function attempts to access memory that has already been freed, leading to unpredictable system behavior or unauthorized access. This flaw is mitigated by ensuring that a proper reference to the fuse_conn structure is maintained until the associated work queue has fully terminated.