PT-2026-2514 · Linux+2 · Linux Kernel+2

Published 2025-11-18 · Updated 2026-06-16 · CVE-2025-68782

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's SCSI target functionality. Specifically, if memory allocation for cmd->t task cdb fails, the pointer remains NULL and is subsequently dereferenced, leading to a potential issue. The fix involves resetting the NULL t task cdb value to point to a default fixed-size buffer in error scenarios. This issue was discovered by the Linux Verification Center (linuxtesting.org) using SVACE.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

AZL-74363

BDU:2026-00730

CVE-2025-68782

ECHO-CBA1-AEEC-B9AC

MGASA-2026-0017

MGASA-2026-0018

OESA-2026-1759

OESA-2026-1760

OESA-2026-1761

USN-8096-1

USN-8096-2

USN-8096-3

USN-8096-4

USN-8096-5

USN-8116-1

USN-8141-1

USN-8163-1

USN-8163-2

USN-8177-1

USN-8177-2

USN-8179-1

USN-8179-2

USN-8179-3

USN-8179-4

USN-8183-1

USN-8183-2

USN-8184-1

USN-8185-1

USN-8185-2

USN-8203-1

USN-8204-1

USN-8243-1

USN-8245-1

USN-8257-1

USN-8258-1

USN-8260-1

USN-8261-1

USN-8265-1

USN-8440-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 1120

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68782.json · Exploit
• https://ubuntu.com/security/CVE-2025-40029 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40179 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23088 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23137 · Security Note
• https://ubuntu.com/security/CVE-2025-71080 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38502 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23133 · Security Note
• https://ubuntu.com/security/CVE-2025-68744 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68794 · Security Note
• https://ubuntu.com/security/CVE-2025-40254 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40084 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8163-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68808 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68208 · Security Note