01 Record

CVE-2025-68229

scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.20% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 10.2% of scored records. A rank, not a probability.

NVD base score

The NVD has published no score for this record

NVD CVSS vector

No NVD score to derive

NVD analysis status

Deferred. NVD last modified this record on 2026-10-14.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-12-16 13:57Z10 MO AGO

Last updated

2026-06-16 16:20Z4 MO AGO

Reserved

2025-12-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-252Unchecked Return ValueBase

Data version

5.2

Document digest

6ee9f11d10707fc0af82e3c6f96b92c9ea80f7f04c22a4beefe5555ad6aae35d

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux2628b352c3d4905adf8129ea50900bd980b6ccef to < 63f511d3855f7f4b35dd63dbc58fc3d935a81268, 2628b352c3d4905adf8129ea50900bd980b6ccef to < 3d8c517f6eb27e47b1a198e05f8023038329b40b, 2628b352c3d4905adf8129ea50900bd980b6ccef to < f449a1edd7a13bb025aaf9342ea6f8bf92684bbf, 2628b352c3d4905adf8129ea50900bd980b6ccef to < 1c9ba455b5073253ceaadae4859546e38e8261fe, 2628b352c3d4905adf8129ea50900bd980b6ccef to < a6ef60898ddaf1414592ce3e5b0d94276d631663, 2628b352c3d4905adf8129ea50900bd980b6ccef to < 72e8831079266749a7023618a0de2f289a9dced6, 2628b352c3d4905adf8129ea50900bd980b6ccef to < 13aff3b8a7184281b134698704d6c06863a8361b, 2628b352c3d4905adf8129ea50900bd980b6ccef to < e6965188f84a7883e6a0d3448e86b0cf29b24dfc, 4.5—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/63f511d3855f7f4b35dd63dbc58fc3d935a81268
git.kernel.orghttps://git.kernel.org/stable/c/3d8c517f6eb27e47b1a198e05f8023038329b40b
git.kernel.orghttps://git.kernel.org/stable/c/f449a1edd7a13bb025aaf9342ea6f8bf92684bbf
git.kernel.orghttps://git.kernel.org/stable/c/1c9ba455b5073253ceaadae4859546e38e8261fe
git.kernel.orghttps://git.kernel.org/stable/c/a6ef60898ddaf1414592ce3e5b0d94276d631663
git.kernel.orghttps://git.kernel.org/stable/c/72e8831079266749a7023618a0de2f289a9dced6
git.kernel.orghttps://git.kernel.org/stable/c/13aff3b8a7184281b134698704d6c06863a8361b
git.kernel.orghttps://git.kernel.org/stable/c/e6965188f84a7883e6a0d3448e86b0cf29b24dfc

07 Fixed in

Debian 12

linux
Fixed in 6.1.159-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.63-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.17.10-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.