Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-45962

In the Linux kernel, the following vulnerability has been resolved: ublk: Validate SQE128 flag before accessing the cmd ublk_ctrl_cmd_dump() accesses (header *)sqe->cmd before IO_URING_F_SQE128 flag check. This could cause out of boundary memory access. Move the SQE128 flag check earlier in ublk_ctrl_uring_cmd() to return -EINVAL immediately if the flag is not set.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:3c6f3b55c451ebf45cc716c46e2d56fe3298875f48a475b062aa56d39406e654
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/block/ublk_drv.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"4b4dff498f46e9802f71bc84258bf73065f51c6a","status":"affected","version":"71f28f3136aff5890cd56de78abc673f8393cad9","versionType":"git"},{"lessThan":"31cac6acf77ece488f29fb8f79589d9298e969c8","status":"affected","version":"71f28f3136aff5890cd56de78abc673f8393cad9","versionType":"git"},{"lessThan":"dbe8e81a2ec608f87f79a34f6444cd62f6a243bb","status":"affected","version":"71f28f3136aff5890cd56…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ed8c0d5c16ed1115fdcf90f09f09a7c90b361e10c1b318e23149f2aa5995cee3 · sha256:519de7b528655ea0… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/block/ublk_drv.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.0"},{"lessThan":"6.0","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.165","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.128","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.75","versionType":"semver"},{"lessThanO…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ed8c0d5c16ed1115fdcf90f09f09a7c90b361e10c1b318e23149f2aa5995cee3 · sha256:519de7b528655ea0… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/block/ublk_drv.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"4b4dff498f46e9802f71bc84258bf73065f51c6a","status":"affected","version":"71f28f3136aff5890cd56de78abc673f8393cad9","versionType":"git"},{"lessThan":"31cac6acf77ece488f29fb8f79589d9298e969c8","status":"affected","version":"71f28f3136aff5890cd56de78abc673f8393cad9","versionType":"git"},{"lessThan":"dbe8e81a2ec608f87f79a34f6444cd62f6a243bb","status":"affected","version":"71f28f3136aff5890cd56…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ed8c0d5c16ed1115fdcf90f09f09a7c90b361e10c1b318e23149f2aa5995cee3 · sha256:519de7b528655ea0… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/block/ublk_drv.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.0"},{"lessThan":"6.0","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.165","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.128","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.75","versionType":"semver"},{"lessThanO…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ed8c0d5c16ed1115fdcf90f09f09a7c90b361e10c1b318e23149f2aa5995cee3 · sha256:519de7b528655ea0… · /containers/cna/affected/1

Source references

6 source assertions
{"url":"https://git.kernel.org/stable/c/17d33ba7291100008360b5a354962db37ad80684"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ed8c0d5c16ed1115fdcf90f09f09a7c90b361e10c1b318e23149f2aa5995cee3 · sha256:519de7b528655ea0… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/31cac6acf77ece488f29fb8f79589d9298e969c8"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ed8c0d5c16ed1115fdcf90f09f09a7c90b361e10c1b318e23149f2aa5995cee3 · sha256:519de7b528655ea0… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/4b4dff498f46e9802f71bc84258bf73065f51c6a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ed8c0d5c16ed1115fdcf90f09f09a7c90b361e10c1b318e23149f2aa5995cee3 · sha256:519de7b528655ea0… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/da7e4b75e50c087d2031a92f6646eb90f7045a67"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ed8c0d5c16ed1115fdcf90f09f09a7c90b361e10c1b318e23149f2aa5995cee3 · sha256:519de7b528655ea0… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/dbe8e81a2ec608f87f79a34f6444cd62f6a243bb"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ed8c0d5c16ed1115fdcf90f09f09a7c90b361e10c1b318e23149f2aa5995cee3 · sha256:519de7b528655ea0… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/f75a5555e0049e7857eae25b60aee98b80e287ec"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ed8c0d5c16ed1115fdcf90f09f09a7c90b361e10c1b318e23149f2aa5995cee3 · sha256:519de7b528655ea0… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer