In the Linux kernel, the following vulnerability has been resolved:
ublk: detach gendisk from ublk device if add_disk() fails
Inside ublk_abort_requests(), gendisk is grabbed for aborting all inflight requests. And ublk_abort_requests() is called when exiting the uring context or handling timeout.
If add_disk() fails, the gendisk may have been freed when calling ublk_abort_requests(), so use-after-free can be caused when getting disk's reference in ublk_abort_requests().
Fixes the bug by detaching gendisk from ublk device if add_disk() fails.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-raspi-realtimeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1029-awsUpgrade linux-image-nvidiaUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-gcp-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-azureUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1028-raspi | Mar 28, 2025 | Jan 6, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub