Riskcovery

CVE-2025-38182

ublk: santizize the arguments from userspace when adding a device

State
Published
Severity
Not scored
Published
Jul 4, 2025
Updated
Oct 30, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ublk: santizize the arguments from userspace when adding a device

Sanity check the values for queue depth and number of queues we get from userspace when adding a device.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 71f28f3136aff5890cd56de78abc673f8393cad9 to before a52d4e28f643eb4ffc7ccb1de9bd47d876804f1fAffected
  • 71f28f3136aff5890cd56de78abc673f8393cad9 to before 3162d8235c8c4d585525cee8a59d1c180940a968Affected
  • 71f28f3136aff5890cd56de78abc673f8393cad9 to before 0f8df5d6f25ac17c52a8bc6418e60a3e63130550Affected
  • 71f28f3136aff5890cd56de78abc673f8393cad9 to before e2b2b7cf6368580114851cb3932f2ad9fbf23386Affected
  • 71f28f3136aff5890cd56de78abc673f8393cad9 to before 8c8472855884355caf3d8e0c50adf825f83454b2Affected
LinuxLinux
  • 6.0Affected
  • before 6.0Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.95 through 6.6.*Not affected
  • 6.12.35 through 6.12.*Not affected
  • 6.15.4 through 6.15.*Not affected
  • 6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.