CVE-2026-64264

kernel: fuse-uring: fix EFAULT clobber in fuse_uring_commit

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 25, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's FUSE (Filesystem in Userspace) component. An error handling vulnerability in the fuse_uring_commit function allows a positive error code to overwrite a critical negative error, causing FUSE operations to be incorrectly reported as successful. This can lead to FUSE callers processing uninitialized or partial data, potentially resulting in data integrity issues or unexpected system behavior.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-754 · Improper Check for Unusual or Exceptional Conditions