Linux Kernel Vulnerability in ublk Driver Disrupts Request Dispatching

CVE-2025-22068

Summary

A vulnerability exists in the Linux kernel's ublk driver, where the handling of requests can lead to potential use-after-free conditions. This arises from the dependency of the driver on the ubq->canceling flag for determining whether requests can be dispatched. When the queue is frozen, the ubq->canceling status needs to be properly set to ensure that commands are canceled and completed reliably, preventing unexpected behavior and potential exploitation. Proper implementation protects against mishandled requests that could compromise system integrity.

References