CVE-2026-64262
kernel: fuse-uring: end fuse_req on io-uring cancel task work
Loading…
Severity
LowRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 25, 2026
Updated · October 15, 2026
Description
A flaw was found in the fuse-uring component of the Linux kernel. When io_uring task work is canceled, the system fails to properly end a fuse_req (FUSE request). This can cause the originating system call thread to block indefinitely, leading to a Denial of Service (DoS) for the affected system. Additionally, repeated cancellations can exhaust background request limits, further stalling operations.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-772 · Missing Release of Resource after Effective Lifetime