CVE-2025-37906

CVE-2025-37906 arises in the Linux kernel’s ublk subsystem, due to a race between io_uring_cmd_complete_in_task and ublk_cancel_cmd. The description states that ublk_cancel_cmd() may call io_uring_cmd_done() to complete uring_cmd, while task work scheduled by io_uring_cmd_complete_in_task() could...