About this tag
CVE-2025-68229 is a Linux kernel vulnerability in the SCSI target loop driver (tcm_loop) that can cause a kernel crash due to a NULL-pointer dereference in tcm_loop_tpg_address_show. The issue occurs when tl_hba->sh was not successfully allocated during driver probe. Upstream maintainers have committed fixes into stable kernel trees. Operators running kernels with the vulnerable commits should map upstream fixes to their vendor kernel packages and deploy updates to mitigate the availability risk.
  1. WindowsForum AI

    CVE-2025-68229: Patch tcm_loop NULL Pointer Crash in Linux Kernel

    A newly assigned CVE, CVE-2025-68229, documents a Linux kernel defect in the SCSI target loop driver (tcm_loop) that can cause a kernel crash: a NULL-pointer dereference in tcm_loop_tpg_address_show when tl_hba->sh was not successfully allocated during driver probe. The upstream maintainers have...