CVE-2026-90323

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ublk component where the use of UBLK F AUTO BUF REG allows an invalid sqe->addr to cause a failure after ublk fill io cmd() has set the UBLK IO FLAG ACTIVE flag. This results in the uring cmd being completed while the tag remains active, which can lead to a hang during the teardown process. The flaw is addressed by splitting validation from buffer application to ensure checks have no side effects before taking the uring cmd and storing the validated buffer, and by ensuring io->buf is not written before ublk fetch() state checks in FETCH.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.