Security tracker / CVE-2025-37759

CVE-2025-37759

ublk: fix handling recovery Description: reissue in ublk_abort_queue()

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in 8284066946e6 ("ublk: grab request reference when the request is
 carnil> handled by userspace"). Vulnerable versions: 6.5.

Bugs

Status

Branch	Status
upstream	released (6.15-rc2) [6ee6bd5d4fce502a5b5a2ea805e9ff16e6aa890f]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.14-upstream-stable	released (6.14.3) [0a21d259ca4d6310fdfcc0284ebbc000e66cbf70]
6.13-upstream-stable	released (6.13.12) [5d34a30efac9c9c93e150130caa940c0df6053c1]
6.12-upstream-stable	released (6.12.24) [caa5c8a2358604f38bf0a4afaa5eacda13763067]
6.6-upstream-stable	needed
6.1-upstream-stable	N/A "Vulnerable code not present"
5.10-upstream-stable	N/A "Vulnerable code not present"
sid	released (6.12.25-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	N/A "Vulnerable code not present"
5.10-bullseye-security	N/A "Vulnerable code not present"