CVE-2025-22068

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue is related to the ublk driver, which depends on the ubq->canceling flag to decide if a request can be dispatched via uring cmd and io uring cmd complete in task(). To fix this, the ubq->canceling flag is set when the queue is frozen, ensuring that the flag can be reliably observed from ublk queue rq() and avoiding use-after-free on uring cmd.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.