# CVE-2026-64264: linux: In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix EFAULT clobber in fuse_uring_com... CVE-2026-64264 is fixed in 20 products on 1 platform, first by ALAS2023-2026-2045, released August 3, 2026. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2026-64264 - Priority: Routine - CVSS: 5.5 (medium) - EPSS: 0.0016 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Jul 25, 2026 ## Description In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix EFAULT clobber in fuse_uring_commit copy_from_user() returns the number of bytes not copied as an unsigned residual on failure (1..sizeof(struct fuse_out_header)). fuse_uring_commit stores that residual in ssize_t err, sets req->out.h.error to -EFAULT, then jumps to out: with err still holding the positive residual. err = copy_from_user(&req->out.h, &ent->headers->in_out, sizeof(req->out.h)); if (err) { req->out.h.error = -EFAULT; goto out; /* err is the positive residual */ } ... out: fuse_uring_req_end(ent, req, err); fuse_uring_req_end() then runs if (error) req->out.h.error = error; which overwrites the just-assigned -EFAULT with the positive residual. FUSE callers such as fuse_simple_request() test err < 0 to detect failure, so the positive value is interpreted as success and the caller proceeds with an uninitialised or partial req->out.args. Fix by assigning err = -EFAULT in the failure branch before jumping to out, so fuse_uring_req_end() receives a negative errno and sets req->out.h.error to -EFAULT. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | bpftool6.18 amzn 2023 | 1:6.18.39-79.141.amzn2023 | [ALAS2023-2026-2045](https://patchblox.com/security/data/fix/linux/alas2023-2026-2045.md) | Aug 3, 2026 | | Linux | bpftool6.18-debuginfo amzn 2023 | 1:6.18.39-79.141.amzn2023 | [ALAS2023-2026-2045](https://patchblox.com/security/data/fix/linux/alas2023-2026-2045.md) | Aug 3, 2026 | | Linux | kernel-livepatch-6.18.39-79.141 amzn 2023 | 1:1.0-0.amzn2023 | [ALAS2023-2026-2045](https://patchblox.com/security/data/fix/linux/alas2023-2026-2045.md) | Aug 3, 2026 | | Linux | kernel6.18 amzn 2023 | 1:6.18.39-79.141.amzn2023 | [ALAS2023-2026-2045](https://patchblox.com/security/data/fix/linux/alas2023-2026-2045.md) | Aug 3, 2026 | | Linux | kernel6.18-debuginfo amzn 2023 | 1:6.18.39-79.141.amzn2023 | [ALAS2023-2026-2045](https://patchblox.com/security/data/fix/linux/alas2023-2026-2045.md) | Aug 3, 2026 | | Linux | kernel6.18-debuginfo-common-aarch64 amzn 2023 | 1:6.18.39-79.141.amzn2023 | [ALAS2023-2026-2045](https://patchblox.com/security/data/fix/linux/alas2023-2026-2045.md) | Aug 3, 2026 | | Linux | kernel6.18-debuginfo-common-x86_64 amzn 2023 | 1:6.18.39-79.141.amzn2023 | [ALAS2023-2026-2045](https://patchblox.com/security/data/fix/linux/alas2023-2026-2045.md) | Aug 3, 2026 | | Linux | kernel6.18-devel amzn 2023 | 1:6.18.39-79.141.amzn2023 | [ALAS2023-2026-2045](https://patchblox.com/security/data/fix/linux/alas2023-2026-2045.md) | Aug 3, 2026 | | Linux | kernel6.18-headers amzn 2023 | 1:6.18.39-79.141.amzn2023 | [ALAS2023-2026-2045](https://patchblox.com/security/data/fix/linux/alas2023-2026-2045.md) | Aug 3, 2026 | | Linux | kernel6.18-modules-extra amzn 2023 | 1:6.18.39-79.141.amzn2023 | [ALAS2023-2026-2045](https://patchblox.com/security/data/fix/linux/alas2023-2026-2045.md) | Aug 3, 2026 | | Linux | kernel6.18-modules-extra-common amzn 2023 | 1:6.18.39-79.141.amzn2023 | [ALAS2023-2026-2045](https://patchblox.com/security/data/fix/linux/alas2023-2026-2045.md) | Aug 3, 2026 | | Linux | kernel6.18-tools amzn 2023 | 1:6.18.39-79.141.amzn2023 | [ALAS2023-2026-2045](https://patchblox.com/security/data/fix/linux/alas2023-2026-2045.md) | Aug 3, 2026 | | Linux | kernel6.18-tools-debuginfo amzn 2023 | 1:6.18.39-79.141.amzn2023 | [ALAS2023-2026-2045](https://patchblox.com/security/data/fix/linux/alas2023-2026-2045.md) | Aug 3, 2026 | | Linux | kernel6.18-tools-devel amzn 2023 | 1:6.18.39-79.141.amzn2023 | [ALAS2023-2026-2045](https://patchblox.com/security/data/fix/linux/alas2023-2026-2045.md) | Aug 3, 2026 | | Linux | linux Debian 14 | 7.1.4-1 | [DEBIAN-CVE-2026-64264](https://patchblox.com/security/data/fix/linux/debian-cve-2026-64264.md) | Aug 7, 2026 | | Linux | microvm-kernel6.18 amzn 2023 | 1:6.18.39-79.141.amzn2023 | [ALAS2023-2026-2045](https://patchblox.com/security/data/fix/linux/alas2023-2026-2045.md) | Aug 3, 2026 | | Linux | perf6.18 amzn 2023 | 1:6.18.39-79.141.amzn2023 | [ALAS2023-2026-2045](https://patchblox.com/security/data/fix/linux/alas2023-2026-2045.md) | Aug 3, 2026 | | Linux | perf6.18-debuginfo amzn 2023 | 1:6.18.39-79.141.amzn2023 | [ALAS2023-2026-2045](https://patchblox.com/security/data/fix/linux/alas2023-2026-2045.md) | Aug 3, 2026 | | Linux | python3-perf6.18 amzn 2023 | 1:6.18.39-79.141.amzn2023 | [ALAS2023-2026-2045](https://patchblox.com/security/data/fix/linux/alas2023-2026-2045.md) | Aug 3, 2026 | | Linux | python3-perf6.18-debuginfo amzn 2023 | 1:6.18.39-79.141.amzn2023 | [ALAS2023-2026-2045](https://patchblox.com/security/data/fix/linux/alas2023-2026-2045.md) | Aug 3, 2026 | --- Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.