CVE-2026-64267

A flaw was found in the Linux kernel's Filesystem in Userspace (FUSE) component. On 32-bit systems, an integer overflow vulnerability exists in the handling of FUSE_NOTIFY_PRUNE messages. A malicious FUSE daemon or a local user could craft a prune notification with a specific count, causing an integer overflow during payload length validation. This can lead to the kernel attempting to read non-existent data, resulting in a system crash and a Denial of Service (DoS).

This vulnerability is rated Moderate rather than Low because a local user or compromised daemon can trigger an arithmetic wrap to cause a kernel crash and system-wide denial of service, though the attack cannot achieve remote execution or data exfiltration. In typical Red Hat Enterprise Linux environments, exposure is significantly restricted because supported production platforms run 64-bit architectures where the size calculation does not wrap. Furthermore, the vulnerable code introduced in upstream Linux kernels is not present in standard Red Hat enterprise kernel builds.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.