CVE-2025-68782

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-68782
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-68782.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-68782
Downstream
Related
Published
2026-01-13T15:28:56.929Z
Modified
2026-03-12T04:31:59.434712Z
Summary
scsi: target: Reset t_task_cdb pointer in error case
Details

In the Linux kernel, the following vulnerability has been resolved:

scsi: target: Reset ttaskcdb pointer in error case

If allocation of cmd->ttaskcdb fails, it remains NULL but is later dereferenced in the 'err' path.

In case of error, reset NULL ttaskcdb value to point at the default fixed-size buffer.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68782.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
9e95fb805dc043cc8ed878a08d1583e4097a5f80
Fixed
6cac97b12bdab04832e0416d049efcd0d48d303b
Fixed
45fd86b444105c8bd07a763f58635c87e5dc7aea
Fixed
8727663ded659aad55eef21e3864ebf5a4796a96
Fixed
0260ad551b0815eb788d47f32899fbcd65d6f128
Fixed
0d36db68fdb8a3325386fd9523b67735f944e1f3
Fixed
8edbb9e371af186b4cf40819dab65fafe109df4d
Fixed
5053eab38a4c4543522d0c320c639c56a8b59908

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-68782.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.8.0
Fixed
5.10.248
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.198
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.160
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.120
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.64
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.3

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-68782.json"