CVE-2026-64263 | Linux Kernel up to 6.18.38/7.1.3 fuse-uring fuse_uring_cancel null pointer dereference

A vulnerability was found in Linux Kernel up to 6.18.38/7.1.3. It has been classified as critical. This vulnerability affects the function fuse_uring_cancel of the component fuse-uring. The manipulation leads to null pointer dereference.

This vulnerability is referenced as CVE-2026-64263. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.