CVE-2025-22068

Summary

CVE-2025-22068 is a recently identified vulnerability in the Linux kernel. This issue affects the ublk driver and involves a failure to properly set the `ubq->canceling` flag when a queue is frozen. As a consequence, the driver incorrectly determines whether a request can be dispatched via uring_cmd and io_uring_cmd_complete_in_task(). Once `ubq->canceling` is set, the uring_cmd can be cancelled using ublk_cancel_cmd() and io_uring_cmd_done(). However, when this flag is not set correctly, a use-after-free vulnerability can occur. This vulnerability has been addressed in the latest Linux kernel release.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.