scsi: target: Reset t_task_cdb pointer in error case
Summary
| CVE | CVE-2025-68782 |
|---|---|
| State | PUBLISHED |
| Assigner | Linux |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-01-13 16:15:57 UTC |
| Updated | 2026-07-14 13:18:00 UTC |
| Description | In the Linux kernel, the following vulnerability has been resolved: scsi: target: Reset t_task_cdb pointer in error case If allocation of cmd->t_task_cdb fails, it remains NULL but is later dereferenced in the 'err' path. In case of error, reset NULL t_task_cdb value to point at the default fixed-size buffer. Found by Linux Verification Center (linuxtesting.org) with SVACE. |
Risk And Classification
EPSS: 0.001730000 probability, percentile 0.068770000 (date 2026-07-14)
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Linux | Linux | affected 9e95fb805dc043cc8ed878a08d1583e4097a5f80 6cac97b12bdab04832e0416d049efcd0d48d303b git | Not specified |
| CNA | Linux | Linux | affected 9e95fb805dc043cc8ed878a08d1583e4097a5f80 45fd86b444105c8bd07a763f58635c87e5dc7aea git | Not specified |
| CNA | Linux | Linux | affected 9e95fb805dc043cc8ed878a08d1583e4097a5f80 8727663ded659aad55eef21e3864ebf5a4796a96 git | Not specified |
| CNA | Linux | Linux | affected 9e95fb805dc043cc8ed878a08d1583e4097a5f80 0260ad551b0815eb788d47f32899fbcd65d6f128 git | Not specified |
| CNA | Linux | Linux | affected 9e95fb805dc043cc8ed878a08d1583e4097a5f80 0d36db68fdb8a3325386fd9523b67735f944e1f3 git | Not specified |
| CNA | Linux | Linux | affected 9e95fb805dc043cc8ed878a08d1583e4097a5f80 8edbb9e371af186b4cf40819dab65fafe109df4d git | Not specified |
| CNA | Linux | Linux | affected 9e95fb805dc043cc8ed878a08d1583e4097a5f80 5053eab38a4c4543522d0c320c639c56a8b59908 git | Not specified |
| CNA | Linux | Linux | affected 5.8 | Not specified |
| CNA | Linux | Linux | unaffected 5.8 semver | Not specified |
| CNA | Linux | Linux | unaffected 5.10.248 5.10.* semver | Not specified |
| CNA | Linux | Linux | unaffected 5.15.198 5.15.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.1.160 6.1.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.6.120 6.6.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.12.64 6.12.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.18.3 6.18.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.19 * original_commit_for_fix | Not specified |
| ADP | Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | affected V3.1.6 * custom | Not specified |
| ADP | Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | affected V3.1.6 * custom | Not specified |
| ADP | Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | affected V3.1.6 * custom | Not specified |
| ADP | Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | affected V3.1.6 * custom | Not specified |
| ADP | Siemens | SIPLUS S7-1500 CPU 1518-4 PN/DP MFP | affected V3.1.6 * custom | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| git.kernel.org/stable/c/0260ad551b0815eb788d47f32899fbcd65d6f128 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/0d36db68fdb8a3325386fd9523b67735f944e1f3 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/45fd86b444105c8bd07a763f58635c87e5dc7aea | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/6cac97b12bdab04832e0416d049efcd0d48d303b | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/5053eab38a4c4543522d0c320c639c56a8b59908 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| cert-portal.siemens.com/productcert/html/ssa-019113.html | 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e | cert-portal.siemens.com | |
| git.kernel.org/stable/c/8edbb9e371af186b4cf40819dab65fafe109df4d | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/8727663ded659aad55eef21e3864ebf5a4796a96 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.