A race condition (CWE-362) exists in the Linux kernel’s fuse‑uring subsystem where the queue->stopped flag is accessed and modified without proper locking. The missing lock can allow one thread to free a struct fuse_req while another thread is still processing it, resulting in a use‑after‑free or memory corruption that can cause the kernel to crash.

All Linux kernel versions that have not yet incorporated the commit that fixed the race in fuse‑uring, affecting standard kernel configurations and any configuration that enables fuse‑uring support. The flaw exists only in the kernel; based on the description, it is inferred that user‑space applications that rely on fuse‑uring can indirectly trigger the condition. The affected products include all distributions using the Linux kernel and any custom builds that enable fuse‑uring.

The CVSS score of 7.8 indicates a high severity that could lead to denial of service if the race is triggered. The EPSS score is < 1 %, suggesting a low likelihood of exploitation in the wild, and the vulnerability is not listed in CISA KEV. The attack vector is likely limited to privileged or kernel‑context attackers who can induce the race, such as through crafted fuse‑uring requests. An exploit could cause the kernel to crash, resulting in loss of availability for the affected system.