PT-2025-51637 · Linux+1 · Linux Kernel+1

Published 2025-12-16 · Updated 2026-04-20 · CVE-2025-68224

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A regression was introduced in the Linux kernel due to a commit (995412e23bb2) related to SCSI core functionality and tag iterators. This regression is triggered by the scsi host busy() function. The issue arises because the SCSI host tag set is checked for initialization within scsi host busy(). The fix ensures that scsi host busy() verifies whether the SCSI host tag set has been initialized before proceeding. This fix is based on the assumption that calls to scsi host busy() and scsi mq setup tags() are serialized, which is the case in the UFS driver. The commit message for a related issue, CVE-2025-68224, explicitly identifies the commit that introduced the regression.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2025-68224

ECHO-9B82-7A5F-5844

MGASA-2026-0017

MGASA-2026-0018

Affected Products

Debian

Linux Kernel

References · 33

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68224.json · Exploit
• https://ubuntu.com/security/CVE-2025-68224 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-68224 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-68224 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2026-0017.html · Security Note
• https://linux.oracle.com/errata/ELSA-2026-50113.html · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2025-68224 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2026-0018 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-68224 · Security Note
• https://linux.oracle.com/errata/ELSA-2026-50112.html · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2026-0017 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2026-0018.html · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2025-68224 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68224 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-68224 · Vendor Advisory