CVE-2026-45975

ublk: use READ_ONCE() to read struct ublksrv_ctrl_cmd

published May 27, 2026

CVSS
—
EPSS
0%
Percentile
3.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ublk: use READ_ONCE() to read struct ublksrv_ctrl_cmd

struct ublksrv_ctrl_cmd is part of the io_uring_sqe, which may lie in

userspace-mapped memory. It's racy to access its fields with normal

loads, as userspace may write to them concurrently. Use READ_ONCE() to

copy the ublksrv_ctrl_cmd from the io_uring_sqe to the stack. Use the

local copy in place of the one in the io_uring_sqe.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00143 · 3.3th percentile
Published
2026-05-27T12:18Z
EPSS history
Timeline
  • 27 MAY 12:18Z
    ublk: use READ_ONCE() to read struct ublksrv_ctrl_cmd
    cvelistv5