7.8

CVE-2026-90324

ublk: check import_ubuf() return value

In the Linux kernel, the following vulnerability has been resolved:

ublk: check import_ubuf() return value

import_ubuf() can fail if the address range (provided by the userspace
ublk server) is outside the allowed user address space. Return that 0
bytes were copied if import_ubuf() fails rather than passing an
uninitialized struct iov_iter to ublk_copy_user_pages().
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 981f95a571e3ca20a496c0b77dbf6b06039c6648
Version < 0121c84adb6a4cd6f7560b5895bd88f9899bbc1f
Status affected
Version 981f95a571e3ca20a496c0b77dbf6b06039c6648
Version < 5ac6019cb78e98c9608fda72726b36ddf8474dd7
Status affected
Version 981f95a571e3ca20a496c0b77dbf6b06039c6648
Version < 3831568792af75b6523fa93bb91560e29189cf55
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.5
Status affected
Version 0
Version < 6.5
Status unaffected
Version <= 6.18.*
Version 6.18.52
Status unaffected
Version <= 7.2.*
Version 7.2.6
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.058
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/0121c84adb6a4cd6f7560b5895bd88f9899bbc1f
https://git.kernel.org/stable/c/5ac6019cb78e98c9608fda72726b36ddf8474dd7
https://git.kernel.org/stable/c/3831568792af75b6523fa93bb91560e29189cf55