---
id: CVE-2025-38182
title: 'ublk: santizize the arguments from userspace when adding a device'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ublk: santizize the arguments from userspace when adding a device

  Sanity check the values for queue depth and number of queues
  we get from userspace when adding a device.
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 71f28f3136aff5890cd56de78abc673f8393cad9 <
    a52d4e28f643eb4ffc7ccb1de9bd47d876804f1f
  - >-
    Linux >= 71f28f3136aff5890cd56de78abc673f8393cad9 <
    3162d8235c8c4d585525cee8a59d1c180940a968
  - >-
    Linux >= 71f28f3136aff5890cd56de78abc673f8393cad9 <
    0f8df5d6f25ac17c52a8bc6418e60a3e63130550
  - >-
    Linux >= 71f28f3136aff5890cd56de78abc673f8393cad9 <
    e2b2b7cf6368580114851cb3932f2ad9fbf23386
  - >-
    Linux >= 71f28f3136aff5890cd56de78abc673f8393cad9 <
    8c8472855884355caf3d8e0c50adf825f83454b2
  - Linux 6.0
published: '2025-07-04'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T12:21:44.638Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-38182'
references:
  - url: 'https://git.kernel.org/stable/c/a52d4e28f643eb4ffc7ccb1de9bd47d876804f1f'
  - url: 'https://git.kernel.org/stable/c/3162d8235c8c4d585525cee8a59d1c180940a968'
  - url: 'https://git.kernel.org/stable/c/0f8df5d6f25ac17c52a8bc6418e60a3e63130550'
  - url: 'https://git.kernel.org/stable/c/e2b2b7cf6368580114851cb3932f2ad9fbf23386'
  - url: 'https://git.kernel.org/stable/c/8c8472855884355caf3d8e0c50adf825f83454b2'
tags:
  - cve.org
epss: 0.00192
epssPercentile: 0.089
ingestedAt: '2026-11-03T17:50:48.368Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ublk: santizize the arguments from userspace when adding a device

Sanity check the values for queue depth and number of queues
we get from userspace when adding a device.

## Affected

- `Linux >= 71f28f3136aff5890cd56de78abc673f8393cad9 < a52d4e28f643eb4ffc7ccb1de9bd47d876804f1f`
- `Linux >= 71f28f3136aff5890cd56de78abc673f8393cad9 < 3162d8235c8c4d585525cee8a59d1c180940a968`
- `Linux >= 71f28f3136aff5890cd56de78abc673f8393cad9 < 0f8df5d6f25ac17c52a8bc6418e60a3e63130550`
- `Linux >= 71f28f3136aff5890cd56de78abc673f8393cad9 < e2b2b7cf6368580114851cb3932f2ad9fbf23386`
- `Linux >= 71f28f3136aff5890cd56de78abc673f8393cad9 < 8c8472855884355caf3d8e0c50adf825f83454b2`
- `Linux 6.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.