The vulnerability in the Linux kernel’s FUSE subsystem was discovered in the abort_on_kill path of request_wait_answer(). When a write operation is concurrently processed, the kernel may free a request structure while it is still being accessed, causing a use‑after‑free. An attacker who triggers this flaw could cause kernel memory corruption and privilege escalation, potentially leading to a system crash. The flaw is a classic use‑after‑free, identified by CWE‑416.

All Linux kernel releases that include the unpatched FUSE code and have not applied the commit sequence referenced in the linked git patches (64b0b5cacbd2fea88001464cb712c9dfc795b26e and 715cb86e33cda43f5224cdc3fd5610c0b6a46f7a) are affected. Without a specified affected‑version range, any kernel that contains the legacy abort_on_kill logic is vulnerable.

The CVSS score is not supplied, and EPSS is unavailable, so a precise numeric risk cannot be quoted. The deficiency, however, is critical because it enables kernel memory corruption that an attacker can trigger via concurrent fuse write requests, potentially leading to privilege escalation. No KEV listing suggests that a publicly available exploit has been reported yet, but the severity of this kernel use‑after‑free warrants immediate action.