CVE-2026-53124
Gravedad CVSS v3.1:
MEDIA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
24/06/2026
Última modificación:
23/07/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ublk: reset per-IO canceled flag on each fetch<br />
<br />
If a ublk server starts recovering devices but dies before issuing fetch<br />
commands for all IOs, cancellation of the fetch commands that were<br />
successfully issued may never complete. This is because the per-IO<br />
canceled flag can remain set even after the fetch for that IO has been<br />
submitted - the per-IO canceled flags for all IOs in a queue are reset<br />
together only once all IOs for that queue have been fetched. So if a<br />
nonempty proper subset of the IOs for a queue are fetched when the ublk<br />
server dies, the IOs in that subset will never successfully be canceled,<br />
as their canceled flags remain set, and this prevents ublk_cancel_cmd<br />
from actually calling io_uring_cmd_done on the commands, despite the<br />
fact that they are outstanding.<br />
<br />
Fix this by resetting the per-IO cancel flags immediately when each IO<br />
is fetched instead of waiting for all IOs for the queue (which may never<br />
happen).
Impacto
Puntuación base 3.x
5.50
Gravedad 3.x
MEDIA
Productos y versiones vulnerables
| CPE | Desde | Hasta |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.14.6 (incluyendo) | 6.15 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.15.1 (incluyendo) | 7.0.10 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:6.15:-:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.15:rc6:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.15:rc7:*:*:*:*:*:* |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página



