Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ublk: The fields devinfo owned by the kernel need to be reseted in the function ublkctrladddev. The function ublkctrladddev uses the memcpy function to copy the ublksrvctrldevinfo from the user space into ub-devinfo. Then, it...

CVE-2026-45962

The CVE affects the Linux kernel ublk driver, where ublk_ctrl_cmd_dump() could access (header *)sqe->cmd before checking IO_URING_F_SQE128, enabling out-of-bounds memory access. The mitigation is to check the SQE128 flag earlier in ublk_ctrl_uring_cmd() and return -EINVAL if not set. Several s...