VDB

CVE-2025-68229

CVE-2025-68229 PUBLISHED

scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()

Reported by linux · Published December 16, 2025

In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() If the allocation of tl_hba->sh fails in tcm_loop_driver_probe() and we attempt to dereference it in tcm_loop_tpg_address_show() we will get a segfault, see below for an example. So, check tl_hba->sh before dereferencing it. Unable to allocate struct scsi_host BUG: kernel NULL pointer dereference, address: 0000000000000194 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 1 PID: 8356 Comm: tokio-runtime-w Not tainted 6.6.104.2-4.azl3 #1 Hardware name: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 09/28/2024 RIP: 0010:tcm_loop_tpg_address_show+0x2e/0x50 [tcm_loop] ... Call Trace: <TASK> configfs_read_iter+0x12d/0x1d0 [configfs] vfs_read+0x1b5/0x300 ksys_read+0x6f/0xf0 ...

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
kernel-libbpf-staticAmazon Linux1:6.1.159-181.297.amzn2023
kernel6.12-libbpf-develAmazon Linux1:6.12.63-84.121.amzn2023
kernel6.12Amazon Linux1:6.12.63-84.121.amzn2023
kernel6.12-modules-extraAmazon Linux1:6.12.63-84.121.amzn2023
kernel-livepatch-6.12.63-84.121Amazon Linux1:1.0-0.amzn2023
kernel-develAmazon Linux1:6.1.159-181.297.amzn2023
perf6.12Amazon Linux1:6.12.63-84.121.amzn2023
kernel6.12-libbpf-staticAmazon Linux1:6.12.63-84.121.amzn2023
kernel-libbpfAmazon Linux1:6.1.159-181.297.amzn2023
bpftool6.12Amazon Linux1:6.12.63-84.121.amzn2023
kernel6.12-libbpfAmazon Linux1:6.12.63-84.121.amzn2023
kernel-libbpf-develAmazon Linux1:6.1.159-181.297.amzn2023

8 more packages have a fixed version. See every fix in Lookup.

Affected products

VendorProductVersions
LinuxLinux2628b352c3d4905adf8129ea50900bd980b6ccef, 2628b352c3d4905adf8129ea50900bd980b6ccef, 2628b352c3d4905adf8129ea50900bd980b6ccef
LinuxLinux4.5, 0, 5.4.302
amazon:2023kernel-libbpf-static0
amazon:2023kernel6.12-libbpf-devel0
amazon:2023kernel6.120
amazon:2023kernel6.12-modules-extra0
amazon:2023kernel-livepatch-6.12.63-84.1210
amazon:2023kernel-devel0
amazon:2023perf6.120
amazon:2023kernel6.12-libbpf-static0
amazon:2023kernel-libbpf0
amazon:2023bpftool6.120
amazon:2023kernel6.12-libbpf0
amazon:2023kernel-libbpf-devel0
amazon:2023kernel6.12-tools-devel0
amazon:2023kernel-modules-extra0
amazon:2023kernel6.12-devel0
amazon:2023bpftool0
amazon:2023kernel6.12-tools0
amazon:2023kernel-tools0

…and 12 more

Timeline

  • Dec 16, 2025 CVE Published
  • Dec 17, 2025 EPSS Score (30 in total, the first dated here)
  • Mar 26, 2026 Coalition ESS Score (2 in total, the first dated here)
  • Mar 29, 2026 Distribution Patch (174 in total, the first dated here)
  • Mar 29, 2026 Security Advisory (181 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2025-68229
vulnetix vdb fixes CVE-2025-68229

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2025-68229/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›