CVE-2026-64265

A flaw was found in the Linux kernel's fuse component. When a fuse request is interrupted and then resent, a specific interrupt entry (intr_entry) is not properly cleared. If the requesting task subsequently receives a fatal signal, this uncleared entry can lead to a use-after-free condition. This vulnerability can result in memory corruption, potentially causing a system crash, and may also lead to the disclosure of sensitive data to userspace.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, the fuse kernel module can be blacklisted to prevent its loading. This action will disable the functionality of FUSE filesystems, which may affect applications that rely on them. To blacklist the module, create /etc/modprobe.d/blacklist-fuse.conf with blacklist fuse, then regenerate the initramfs using dracut -f -v and reboot the system. This change requires a system reboot to take effect and may impact system functionality if FUSE is in use.