CVE-2026-90324

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists where the import ubuf() function can fail if the address range provided by the userspace ublk server is outside the allowed user address space. When this failure occurs, the system may pass an uninitialized struct iov iter to the ublk copy user pages() function instead of returning that zero bytes were copied.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.