PT-2026-43829 · Linux · Linux

Published 2026-05-27 · Updated 2026-05-27 · CVE-2026-45962

Mitre

In the Linux kernel, the following vulnerability has been resolved:

ublk: Validate SQE128 flag before accessing the cmd

ublk ctrl cmd dump() accesses (header *)sqe->cmd before IO URING F SQE128 flag check. This could cause out of boundary memory access.

Move the SQE128 flag check earlier in ublk ctrl uring cmd() to return -EINVAL immediately if the flag is not set.

Related Identifiers

CVE-2026-45962

Affected Products

Linux

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-45962 · Security Note
• https://git.kernel.org/stable/c/f75a5555e0049e7857eae25b60aee98b80e287ec · Note
• https://git.kernel.org/stable/c/4b4dff498f46e9802f71bc84258bf73065f51c6a · Note
• https://git.kernel.org/stable/c/dbe8e81a2ec608f87f79a34f6444cd62f6a243bb · Note
• https://git.kernel.org/stable/c/31cac6acf77ece488f29fb8f79589d9298e969c8 · Note
• https://git.kernel.org/stable/c/da7e4b75e50c087d2031a92f6646eb90f7045a67 · Note
• https://git.kernel.org/stable/c/17d33ba7291100008360b5a354962db37ad80684 · Note