CVE-2025-37759

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version containing commit 8284066946e6

Description A null pointer dereference issue has been identified in the Linux kernel's ublk driver, specifically in the handling of recovery and reissue in ublk abort queue(). This issue can cause a kernel panic when a request is freed before io uring returns the zc buffer back. The problem arises from a commit that fails to grab a request reference when the request is handled by userspace, leading to potential requeuing, redispatch, and failure when canceling an uring command.

Recommendations For Linux kernel versions prior to the version containing commit 8284066946e6, apply the fix that always grabs a request reference for aborting the request to prevent the null pointer dereference issue.