CVE-2026-45962

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-45962
In the Linux kernel, the following vulnerability has been resolved: ublk: Validate SQE128 flag before accessing the cmd ublk_ctrl_cmd_dump() accesses (header *)sqe->cmd before IO_URING_F_SQE128 flag check. This could cause out of boundary memory access. Move the SQE128 flag check earlier in ublk_ctrl_uring_cmd() to return -EINVAL immediately if the flag is not set.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/17d33ba7291100008360b5a354962db37ad80684 Patch
https://git.kernel.org/stable/c/31cac6acf77ece488f29fb8f79589d9298e969c8 Patch
https://git.kernel.org/stable/c/4b4dff498f46e9802f71bc84258bf73065f51c6a Patch
https://git.kernel.org/stable/c/da7e4b75e50c087d2031a92f6646eb90f7045a67 Patch
https://git.kernel.org/stable/c/dbe8e81a2ec608f87f79a34f6444cd62f6a243bb Patch
https://git.kernel.org/stable/c/f75a5555e0049e7857eae25b60aee98b80e287ec Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

16 Jun 2026, 02:31

Type Values Removed Values Added
CWE NVD-CWE-noinfo
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/17d33ba7291100008360b5a354962db37ad80684 - () https://git.kernel.org/stable/c/17d33ba7291100008360b5a354962db37ad80684 - Patch
References () https://git.kernel.org/stable/c/31cac6acf77ece488f29fb8f79589d9298e969c8 - () https://git.kernel.org/stable/c/31cac6acf77ece488f29fb8f79589d9298e969c8 - Patch
References () https://git.kernel.org/stable/c/4b4dff498f46e9802f71bc84258bf73065f51c6a - () https://git.kernel.org/stable/c/4b4dff498f46e9802f71bc84258bf73065f51c6a - Patch
References () https://git.kernel.org/stable/c/da7e4b75e50c087d2031a92f6646eb90f7045a67 - () https://git.kernel.org/stable/c/da7e4b75e50c087d2031a92f6646eb90f7045a67 - Patch
References () https://git.kernel.org/stable/c/dbe8e81a2ec608f87f79a34f6444cd62f6a243bb - () https://git.kernel.org/stable/c/dbe8e81a2ec608f87f79a34f6444cd62f6a243bb - Patch
References () https://git.kernel.org/stable/c/f75a5555e0049e7857eae25b60aee98b80e287ec - () https://git.kernel.org/stable/c/f75a5555e0049e7857eae25b60aee98b80e287ec - Patch

27 May 2026, 14:17

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-27 14:17

Updated : 2026-06-16 02:31

NVD link : CVE-2026-45962

Mitre link : CVE-2026-45962

CVE.ORG link : CVE-2026-45962

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo