CVE-2025-37906: ublk: fix race between io_uring_cmd_complete_in_task and ublk_cancel_cmd
In the Linux kernel, the following vulnerability has been resolved:
ublk: fix race between iouringcmdcompleteintask and ublkcancelcmd
ublkcancelcmd() calls iouringcmddone() to complete uringcmd, but we may have scheduled task work via iouringcmdcompleteintask() for dispatching request, then kernel crash can be triggered.
Fix it by not trying to canceling the command if ublk block request is started.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-37906?
CVE-2025-37906 is classified as a medium severity vulnerability.
How do I fix CVE-2025-37906?
To fix CVE-2025-37906, you should update to the latest version of the Linux kernel where the vulnerability has been patched.
What systems are affected by CVE-2025-37906?
CVE-2025-37906 affects the Linux kernel, specifically systems utilizing the ublk feature.
What type of vulnerability is CVE-2025-37906?
CVE-2025-37906 is a race condition vulnerability in the Linux kernel.
Is there a workaround for CVE-2025-37906?
There are no known effective workarounds for CVE-2025-37906, so patching is recommended.