CVE-2026-45962
Published May 27, 2026
Modified May 27, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: ublk: Validate SQE128 flag before accessing the cmd ublk_ctrl_cmd_dump() accesses (header *)sqe->cmd before IO_URING_F_SQE128 flag check. This could cause out of boundary memory access. Move the SQE128 flag check earlier in ublk_ctrl_uring_cmd() to return -EINVAL immediately if the flag is not set.
Is your site exposed to CVE-2026-45962?
Run a free security scan — no signup, results in seconds.
EPSS — Exploit Prediction
0.0016
Probability of exploitation
0.05%
Percentile rank
EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.
References
Other References
https://git.kernel.org/stable/c/17d33ba7291100008360b5a354962db37ad80684
https://git.kernel.org/stable/c/31cac6acf77ece488f29fb8f79589d9298e969c8
https://git.kernel.org/stable/c/4b4dff498f46e9802f71bc84258bf73065f51c6a
https://git.kernel.org/stable/c/da7e4b75e50c087d2031a92f6646eb90f7045a67
https://git.kernel.org/stable/c/dbe8e81a2ec608f87f79a34f6444cd62f6a243bb
https://git.kernel.org/stable/c/f75a5555e0049e7857eae25b60aee98b80e287ec
Frequently Asked Questions
What is CVE-2026-45962? +
In the Linux kernel, the following vulnerability has been resolved:
ublk: Validate SQE128 flag before accessing the cmd
ublk_ctrl_cmd_dump() accesses (header *)sqe->cmd before
IO_URING_F_SQE128 flag check. This could cause out of boundary memory
access.
Move the SQE128 flag check earlier in ublk_ctrl_uring_cmd() to return
-EINVAL immediately if the flag is not set.
How do I check if I'm vulnerable to CVE-2026-45962? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.