CVE-2025-68782

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's SCSI target functionality. Specifically, if memory allocation for cmd->t task cdb fails, the pointer remains NULL and is subsequently dereferenced, leading to a potential issue. The fix involves resetting the NULL t task cdb value to point to a default fixed-size buffer in error scenarios. This issue was discovered by the Linux Verification Center (linuxtesting.org) using SVACE.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.