CVE-2025-37906

CVE-2025-37906 concerns the Linux kernel’s ublk driver where a race can occur between io_uring_cmd_complete_in_task and ublk_cancel_cmd. Specifically, ublk_cancel_cmd() may call io_uring_cmd_done() to finish an uring_cmd while a scheduled task work via io_uring_cmd_complete_in_task() is still pen...