CVE-2025-68229: linux

CVSS: UnknownDeferred
AliasesUBUNTU-CVE-2025-68229DEBIAN-CVE-2025-68229
Published 16-12-2025Last modified 16-06-2026
Open JSON

Vulnerability summary

CVE-2025-68229 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.20% chance of exploitation in the next 30 days, higher than 9.8% of scored vulnerabilities.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.20%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 29 · Related 26
DLA-4436-1MGASA-2026-0017MGASA-2026-0018USN-8094-1USN-8094-2USN-8094-3

Timeline

  1. 16-12-2025
    PublishedVulnerability first disclosed.
  2. 16-06-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() If the allocation of tl_hba->sh fails in tcm_loop_driver_probe() and we attempt to dereference it in tcm_loop_tpg_address_show() we will get a segfault, see below for an example. So, check tl_hba->sh before dereferencing it. Unable to allocate struct scsi_host BUG: kernel NULL pointer dereference, address: 0000000000000194 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 1 PID: 8356 Comm: tokio-runtime-w Not tainted 6.6.104.2-4.azl3 #1 Hardware name: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 09/28/2024 RIP: 0010:tcm_loop_tpg_address_show+0x2e/0x50 [tcm_loop] ... Call Trace: <TASK> configfs_read_iter+0x12d/0x1d0 [configfs] vfs_read+0x1b5/0x300 ksys_read+0x6f/0xf0 ...

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.20%

Chance of exploitation in the next 30 days

Percentile

10%

Versus all other CVEs

30-day change

0.00 pp

From 0.20% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.20%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu155 products
  • linuxAll versions (No fix recorded) | < 5.15.0-173.183 | < 6.8.0-106.106 | < 6.17.0-19.19
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1103.110 | < 6.8.0-1050.53 | < 6.17.0-1009.9
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian1 product
  • linux< 6.1.159-1 | < 6.12.63-1 | < 6.17.10-1
Linux1 product
  • linux≥ 2628b352c3d4905adf8129ea50900bd980b6ccef, < 63f511d3855f7f4b35dd63dbc58fc3d935a81268 | ≥ 2628b352c3d4905adf8129ea50900bd980b6ccef, < 3d8c517f6eb27e47b1a198e05f8023038329b40b | ≥ 2628b352c3d4905adf8129ea50900bd980b6ccef, < f449a1edd7a13bb025aaf9342ea6f8bf92684bbf | ≥ 2628b352c3d4905adf8129ea50900bd980b6ccef, < 1c9ba455b5073253ceaadae4859546e38e8261fe | ≥ 2628b352c3d4905adf8129ea50900bd980b6ccef, < a6ef60898ddaf1414592ce3e5b0d94276d631663 | ≥ 2628b352c3d4905adf8129ea50900bd980b6ccef, < 72e8831079266749a7023618a0de2f289a9dced6 | ≥ 2628b352c3d4905adf8129ea50900bd980b6ccef, < 13aff3b8a7184281b134698704d6c06863a8361b | ≥ 2628b352c3d4905adf8129ea50900bd980b6ccef, < e6965188f84a7883e6a0d3448e86b0cf29b24dfc | 4.5

3 vendors · 157 products

References

39 links
Show all 39 references