CVE-2025-38182

ublk: santizize the arguments from userspace when adding a device

Published: 7/4/2025 Last updated: 7/28/2025 Reserved: 4/16/2025

In the Linux kernel, the following vulnerability has been resolved: ublk: santizize the arguments from userspace when adding a device Sanity check the values for queue depth and number of queues we get from userspace when adding a device.

CNA assigner: Linux (416baaa9-dc9f-4396-8d5f-8c081fb06d67) Requested by: n/a

Opam packages affected (29)

albatross cdrom conf-bpftool conf-libbpf conf-linux-libc-dev core core_unix hvsock mirage-block-unix mm ocaml-probes ortools_solvers orun rawlink rawlink-eio rawlink-lwt restricted shell solo5 solo5-bindings-hvt solo5-bindings-spt solo5-cross-aarch64 solo5-kernel-ukvm tracy-client tuntap uring vhd-format vhd-format-lwt xapi-stdext-unix

Products affected (1)

Product	Vendor	Version
Linux	Linux	15.1(3)SVJ2

References (4)

https://git.kernel.org/stable/c/3162d8235c8c4d585525cee8a59d1c180940a968
https://git.kernel.org/stable/c/0f8df5d6f25ac17c52a8bc6418e60a3e63130550
https://git.kernel.org/stable/c/e2b2b7cf6368580114851cb3932f2ad9fbf23386
https://git.kernel.org/stable/c/8c8472855884355caf3d8e0c50adf825f83454b2