Medium 5.5Published May 27, 2026

CVE-2026-45962ublk: Validate SQE128 flag before accessing the cmd

Updated under an hour ago (Oct 26, 2026, 3:50 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ublk: Validate SQE128 flag before accessing the cmd ublk_ctrl_cmd_dump() accesses (header *)sqe->cmd before IO_URING_F_SQE128 flag check. This could cause out of boundary memory access. Move the SQE128 flag check earlier in ublk_ctrl_uring_cmd() to return -EINVAL immediately if the flag is not set.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: May 27, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	71f28f3136aff5890cd56de78abc673f8393cad9 builds before 4b4dff498f46e9802f71bc84258bf73065f51c6a; 71f28f3136aff5890cd56de78abc673f8393cad9 builds before 31cac6acf77ece488f29fb8f79589d9298e969c8; from 71f28f3136aff5890cd56de78abc673f8393cad9 before dbe8e81a2ec608f87f79a34f6444cd62f6a243bb; from 71f28f3136aff5890cd56de78abc673f8393cad9 before f75a5555e0049e7857eae25b60aee98b80e287ec; 71f28f3136aff5890cd56de78abc673f8393cad9 builds before 17d33ba7291100008360b5a354962db37ad80684; from 71f28f3136aff5890cd56de78abc673f8393cad9 before da7e4b75e50c087d2031a92f6646eb90f7045a67	CNA record
linux linux_kernel linux:linux_kernel	from 6.0 before 6.1.165; from 6.2 before 6.6.128; from 6.7 before 6.12.75; from 6.13 before 6.18.14; from 6.19 before 6.19.4	NVD

References

References

https://git.kernel.org/stable/c/4b4dff498f46e9802f71bc84258bf73065f51c6a	patch
https://git.kernel.org/stable/c/31cac6acf77ece488f29fb8f79589d9298e969c8	patch
https://git.kernel.org/stable/c/dbe8e81a2ec608f87f79a34f6444cd62f6a243bb	patch
https://git.kernel.org/stable/c/f75a5555e0049e7857eae25b60aee98b80e287ec	patch
https://git.kernel.org/stable/c/17d33ba7291100008360b5a354962db37ad80684	patch
https://git.kernel.org/stable/c/da7e4b75e50c087d2031a92f6646eb90f7045a67	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.