{"id":"CVE-2025-38182","title":"ublk: santizize the arguments from userspace when adding a device","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nublk: santizize the arguments from userspace when adding a device\n\nSanity check the values for queue depth and number of queues\nwe get from userspace when adding a device.","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 71f28f3136aff5890cd56de78abc673f8393cad9 < a52d4e28f643eb4ffc7ccb1de9bd47d876804f1f","Linux >= 71f28f3136aff5890cd56de78abc673f8393cad9 < 3162d8235c8c4d585525cee8a59d1c180940a968","Linux >= 71f28f3136aff5890cd56de78abc673f8393cad9 < 0f8df5d6f25ac17c52a8bc6418e60a3e63130550","Linux >= 71f28f3136aff5890cd56de78abc673f8393cad9 < e2b2b7cf6368580114851cb3932f2ad9fbf23386","Linux >= 71f28f3136aff5890cd56de78abc673f8393cad9 < 8c8472855884355caf3d8e0c50adf825f83454b2","Linux 6.0"],"published":"2025-07-04","updated":"2026-10-30","sourceUpdated":"2026-10-30T12:21:44.638Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-38182","references":[{"url":"https://git.kernel.org/stable/c/a52d4e28f643eb4ffc7ccb1de9bd47d876804f1f"},{"url":"https://git.kernel.org/stable/c/3162d8235c8c4d585525cee8a59d1c180940a968"},{"url":"https://git.kernel.org/stable/c/0f8df5d6f25ac17c52a8bc6418e60a3e63130550"},{"url":"https://git.kernel.org/stable/c/e2b2b7cf6368580114851cb3932f2ad9fbf23386"},{"url":"https://git.kernel.org/stable/c/8c8472855884355caf3d8e0c50adf825f83454b2"}],"tags":["cve.org"],"epss":0.00192,"epssPercentile":0.089,"ingestedAt":"2026-11-03T17:50:48.368Z","slug":"CVE-2025-38182","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nublk: santizize the arguments from userspace when adding a device\n\nSanity check the values for queue depth and number of queues\nwe get from userspace when adding a device.\n\n## Affected\n\n- `Linux >= 71f28f3136aff5890cd56de78abc673f8393cad9 < a52d4e28f643eb4ffc7ccb1de9bd47d876804f1f`\n- `Linux >= 71f28f3136aff5890cd56de78abc673f8393cad9 < 3162d8235c8c4d585525cee8a59d1c180940a968`\n- `Linux >= 71f28f3136aff5890cd56de78abc673f8393cad9 < 0f8df5d6f25ac17c52a8bc6418e60a3e63130550`\n- `Linux >= 71f28f3136aff5890cd56de78abc673f8393cad9 < e2b2b7cf6368580114851cb3932f2ad9fbf23386`\n- `Linux >= 71f28f3136aff5890cd56de78abc673f8393cad9 < 8c8472855884355caf3d8e0c50adf825f83454b2`\n- `Linux 6.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}