CVE-2025-68229

scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()

State: Published
Severity: Not scored
Published: Dec 16, 2025
Updated: Jun 16, 2026
Reserved: Dec 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()

If the allocation of tl_hba->sh fails in tcm_loop_driver_probe() and we attempt to dereference it in tcm_loop_tpg_address_show() we will get a segfault, see below for an example. So, check tl_hba->sh before dereferencing it.

Unable to allocate struct scsi_host BUG: kernel NULL pointer dereference, address: 0000000000000194 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 1 PID: 8356 Comm: tokio-runtime-w Not tainted 6.6.104.2-4.azl3 #1 Hardware name: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 09/28/2024 RIP: 0010:tcm_loop_tpg_address_show+0x2e/0x50 [tcm_loop] ... Call Trace: <TASK> configfs_read_iter+0x12d/0x1d0 [configfs] vfs_read+0x1b5/0x300 ksys_read+0x6f/0xf0 ...

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	2628b352c3d4905adf8129ea50900bd980b6ccef to before 63f511d3855f7f4b35dd63dbc58fc3d935a81268Affected 2628b352c3d4905adf8129ea50900bd980b6ccef to before 3d8c517f6eb27e47b1a198e05f8023038329b40bAffected 2628b352c3d4905adf8129ea50900bd980b6ccef to before f449a1edd7a13bb025aaf9342ea6f8bf92684bbfAffected 2628b352c3d4905adf8129ea50900bd980b6ccef to before 1c9ba455b5073253ceaadae4859546e38e8261feAffected 2628b352c3d4905adf8129ea50900bd980b6ccef to before a6ef60898ddaf1414592ce3e5b0d94276d631663Affected 2628b352c3d4905adf8129ea50900bd980b6ccef to before 72e8831079266749a7023618a0de2f289a9dced6Affected 2628b352c3d4905adf8129ea50900bd980b6ccef to before 13aff3b8a7184281b134698704d6c06863a8361bAffected 2628b352c3d4905adf8129ea50900bd980b6ccef to before e6965188f84a7883e6a0d3448e86b0cf29b24dfcAffected
LinuxLinux	4.5Affected before 4.5Not affected 5.4.302 through 5.4.Not affected 5.10.247 through 5.10.Not affected 5.15.197 through 5.15.Not affected 6.1.159 through 6.1.Not affected 6.6.118 through 6.6.Not affected 6.12.60 through 6.12.Not affected 6.17.10 through 6.17.*Not affected 6.18 and laterNot affected

Product

Versions

LinuxLinux

2628b352c3d4905adf8129ea50900bd980b6ccef to before 63f511d3855f7f4b35dd63dbc58fc3d935a81268Affected
2628b352c3d4905adf8129ea50900bd980b6ccef to before 3d8c517f6eb27e47b1a198e05f8023038329b40bAffected
2628b352c3d4905adf8129ea50900bd980b6ccef to before f449a1edd7a13bb025aaf9342ea6f8bf92684bbfAffected
2628b352c3d4905adf8129ea50900bd980b6ccef to before 1c9ba455b5073253ceaadae4859546e38e8261feAffected
2628b352c3d4905adf8129ea50900bd980b6ccef to before a6ef60898ddaf1414592ce3e5b0d94276d631663Affected
2628b352c3d4905adf8129ea50900bd980b6ccef to before 72e8831079266749a7023618a0de2f289a9dced6Affected
2628b352c3d4905adf8129ea50900bd980b6ccef to before 13aff3b8a7184281b134698704d6c06863a8361bAffected
2628b352c3d4905adf8129ea50900bd980b6ccef to before e6965188f84a7883e6a0d3448e86b0cf29b24dfcAffected

LinuxLinux

4.5Affected
before 4.5Not affected
5.4.302 through 5.4.*Not affected
5.10.247 through 5.10.*Not affected
5.15.197 through 5.15.*Not affected
6.1.159 through 6.1.*Not affected
6.6.118 through 6.6.*Not affected
6.12.60 through 6.12.*Not affected
6.17.10 through 6.17.*Not affected
6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.