CVE-2025-68229scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
- —Not scoredno CVSS score yet
- 0.20%Exploitation in 30 daysEPSS · top 90% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() If the allocation of tl_hba->sh fails in tcm_loop_driver_probe() and we attempt to dereference it in tcm_loop_tpg_address_show() we will get a segfault, see below for an example. So, check tl_hba->sh before dereferencing it. Unable to allocate struct scsi_host BUG: kernel NULL pointer dereference, address: 0000000000000194 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 1 PID: 8356 Comm: tokio-runtime-w Not tainted 6.6.104.2-4.azl3 #1 Hardware name: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 09/28/2024 RIP: 0010:tcm_loop_tpg_address_show+0x2e/0x50 [tcm_loop] ... Call Trace: <TASK> configfs_read_iter+0x12d/0x1d0 [configfs] vfs_read+0x1b5/0x300 ksys_read+0x6f/0xf0 ...
Timeline
ID reserved
By Linux
Published
- 6 months later
· 6 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Deferred.
- EPSS (exploitation in 30 days)
- 0.20% · top 90% of all CVEs (13 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.
Affected products
- affected 2628b352c3d4905adf8129ea50900bd980b6ccef – < 63f511d3855f7f4b35dd63dbc58fc3d935a81268
- affected 2628b352c3d4905adf8129ea50900bd980b6ccef – < 3d8c517f6eb27e47b1a198e05f8023038329b40b
- affected 2628b352c3d4905adf8129ea50900bd980b6ccef – < f449a1edd7a13bb025aaf9342ea6f8bf92684bbf
- affected 2628b352c3d4905adf8129ea50900bd980b6ccef – < 1c9ba455b5073253ceaadae4859546e38e8261fe
- affected 2628b352c3d4905adf8129ea50900bd980b6ccef – < a6ef60898ddaf1414592ce3e5b0d94276d631663
- affected 2628b352c3d4905adf8129ea50900bd980b6ccef – < 72e8831079266749a7023618a0de2f289a9dced6
- affected 2628b352c3d4905adf8129ea50900bd980b6ccef – < 13aff3b8a7184281b134698704d6c06863a8361b
- affected 2628b352c3d4905adf8129ea50900bd980b6ccef – < e6965188f84a7883e6a0d3448e86b0cf29b24dfc
- affected 4.5
- unaffected < 4.5
- unaffected 5.4.302 – ≤ 5.4.*
- unaffected 5.10.247 – ≤ 5.10.*
- unaffected 5.15.197 – ≤ 5.15.*
- unaffected 6.1.159 – ≤ 6.1.*
- unaffected 6.6.118 – ≤ 6.6.*
- unaffected 6.12.60 – ≤ 6.12.*
- unaffected 6.17.10 – ≤ 6.17.*
- unaffected 6.18 – ≤ *
References
References8
- https://git.kernel.org/stable/c/63f511d3855f7f4b35dd63dbc58fc3d935a81268 (opens in a new tab)
- https://git.kernel.org/stable/c/3d8c517f6eb27e47b1a198e05f8023038329b40b (opens in a new tab)
- https://git.kernel.org/stable/c/f449a1edd7a13bb025aaf9342ea6f8bf92684bbf (opens in a new tab)
- https://git.kernel.org/stable/c/1c9ba455b5073253ceaadae4859546e38e8261fe (opens in a new tab)
- https://git.kernel.org/stable/c/a6ef60898ddaf1414592ce3e5b0d94276d631663 (opens in a new tab)
- https://git.kernel.org/stable/c/72e8831079266749a7023618a0de2f289a9dced6 (opens in a new tab)
- https://git.kernel.org/stable/c/13aff3b8a7184281b134698704d6c06863a8361b (opens in a new tab)
- https://git.kernel.org/stable/c/e6965188f84a7883e6a0d3448e86b0cf29b24dfc (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2025-203667 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2025-68229)Record last updated .