CVE-2026-64265

In the Linux kernel, the following vulnerability has been resolved: fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req When fuse_resend() moves a request from fpq->processing back to fiq->pending, it sets FR_PENDING and clears FR_SENT but does not remove the requests intr_entry from fiq->interrupts. If the request had FR_INTERRUPTED set from a prior signal, intr_entry remains dangling on fiq->interrupts. When the requesting task then receives a fatal signal, fuse_remove_pending_req() sees FR_PENDING=1, removes the request from fiq->pending and frees it via the refcount path, also without cleaning intr_entry. The stale intr_entry causes use-after-free when fuse_read_interrupt() iterates fiq->interrupts: - list_del_init(&req->intr_entry) -> UAF write on freed slab - req->in.h.unique -> UAF read, data leaked to userspace Remove intr_entry from fiq->interrupts in fuse_resend() for interrupted requests before they are placed back on fiq->pending. Add a WARN_ON if the intr_entry is not empty on request destruction.

• CWE-416

• https://git.kernel.org/stable/c/1d8ecd0cd696a5df0b2f72046a4ccee5d2a8ec2cPatch
• https://git.kernel.org/stable/c/7366e6f4d2b4c7002b13fb01219e83679dad4127Patch
• https://git.kernel.org/stable/c/893479015cb6442fd389d3b553ab3036c9541715Patch
• https://git.kernel.org/stable/c/f8fce75fedf73ac72aa09163deb8f4291fdcaad2Patch

Published

Jul 25, 2026

Last Modified

Aug 12, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-6426A type mismatch vulnerability was found in QEMU's vhost infl…4.4
• CVE-2026-64260In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-64261In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-64262In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-64263In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-64264In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-64266In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-64267In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-64268In the Linux kernel, the following vulnerability has been re…9.8
• CVE-2026-64269In the Linux kernel, the following vulnerability has been re…9.1
• CVE-2026-6427The a3 Lazy Load plugin for WordPress is vulnerable to Store…6.4
• CVE-2026-64270In the Linux kernel, the following vulnerability has been re…