The Linux kernel’s ublk controller contains a flaw in the function that dumps control commands. The function ublk_ctrl_cmd_dump() reads a command pointer before confirming that the SQE128 flag is set, which can result in an out-of-bounds memory access and potentially expose kernel data.

All Linux kernel builds that include the unpatched ublk implementation are affected. The advisory does not list specific release series or versions; any kernel released before the fix may be vulnerable.

No public CVSS score is available, and the EPSS score is not provided, so a formal risk quantification cannot be made from the data. The vulnerability could lead to memory read errors or kernel instability. The likely attack vector appears local to the kernel’s ublk subsystem; the description does not state a remote component or external trigger. The defect is not listed in the CISA KEV catalog, indicating no known active exploitation at the time of publication.