The Linux kernel’s ublk controller contains a flaw in the function that dumps control commands. The function ublk_ctrl_cmd_dump() reads a command pointer before confirming that the SQE128 flag is set, which can result in an out-of-bounds memory access and potentially expose kernel data. This issue is classified as CWE-1285.

All Linux kernel builds that include the unpatched ublk implementation are affected. The advisory does not list specific release series or versions; any kernel released before the fix may be vulnerable.

The CVSS score of 5.5 indicates medium severity, and the EPSS score of < 1% suggests a very low probability of exploitation; the vulnerability could lead to memory read errors or kernel instability. The likely attack vector appears local to the kernel’s ublk subsystem; the description does not state a remote component or external trigger. The defect is not listed in the CISA KEV catalog, indicating no known active exploitation at the time of publication.