vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-90324

ublk: check import_ubuf() return value

HIGH
7.8
CVSS Score
Published: September 17, 2026 at 04:08 PM UTC
Updated: October 21, 2026 at 01:20 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.8
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: ublk: check import_ubuf() return value import_ubuf() can fail if the address range (provided by the userspace ublk server) is outside the allowed user address space. Return that 0 bytes were copied if import_ubuf() fails rather than passing an uninitialized struct iov_iter to ublk_copy_user_pages().

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
6.5981f95a571e3ca20a496c0b77dbf6b06039c6648
Vendor states this is fixed in 0121c84adb6a4cd6f7560b5895bd88f9899bbc1f (fixed)
Vendor states this is fixed in 3831568792af75b6523fa93bb91560e29189cf55 (fixed)
Vendor states this is fixed in 5ac6019cb78e98c9608fda72726b36ddf8474dd7 (fixed)
Vendor states this is fixed in 6.12.114 (unaffected)
Vendor states this is fixed in 6.18.52 (unaffected)
Vendor states this is fixed in 6.5 (unaffected)
Vendor states this is fixed in 6.6.160 (unaffected)
Vendor states this is fixed in 7.2.6 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (5)

Source: cverecord
https://git.kernel.org/stable/c/0121c84adb6a4cd6f7560b5895bd88f9899bbc1f
Source: cverecord
https://git.kernel.org/stable/c/5ac6019cb78e98c9608fda72726b36ddf8474dd7
Source: cverecord
https://git.kernel.org/stable/c/3831568792af75b6523fa93bb91560e29189cf55
Source: cverecord
https://git.kernel.org/stable/c/7f97c762b5f6e0005c5c7d040ded73bf7fb3587e
Source: cverecord
https://git.kernel.org/stable/c/27ff6e8703f7a7160c728501da2f8ef8e7bb6b2f

CVSS

7.8HIGHLinux
Vector?

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card