PT-2026-2550 · Linux+3 · Linux Kernel+3

CVE-2025-68818 · Published 2025-11-10 · Updated 2026-06-16

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.133

Description The Linux kernel contained a flaw related to SCSI operations and the qla2xxx driver. A reverted commit introduced a condition where code within qla2x00 abort all cmds() could call a function without holding a necessary spinlock, leading to a potential null pointer dereference in target mode. Subsequent code added a spinlock, but the original issue remained due to redundant and buggy code. This could result in a kernel crash, as indicated by a 'BUG: kernel NULL pointer dereference' message.

Recommendations Update to version 6.1.133 or later.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

AZL-74408

BDU:2026-09453

CVE-2025-68818

ECHO-865B-D0E3-D22A

MGASA-2026-0017

MGASA-2026-0018

OESA-2026-1759

OESA-2026-1760

OESA-2026-1761

OPENSUSE-SU-2026:20416-1

SUSE-SU-2026:1078-1

SUSE-SU-2026:1557-1

SUSE-SU-2026:1563-1

SUSE-SU-2026:1574-1

SUSE-SU-2026:1606-1

SUSE-SU-2026:20838-1

SUSE-SU-2026:20873-1

SUSE-SU-2026:20931-1

SUSE-SU-2026:21284-1

USN-8096-1

USN-8096-2

USN-8096-3

USN-8096-4

USN-8096-5

USN-8116-1

USN-8141-1

USN-8163-1

USN-8163-2

USN-8177-1

USN-8177-2

USN-8179-1

USN-8179-2

USN-8179-3

USN-8179-4

USN-8183-1

USN-8183-2

USN-8184-1

USN-8185-1

USN-8185-2

USN-8203-1

USN-8204-1

USN-8243-1

USN-8245-1

USN-8257-1

USN-8258-1

USN-8260-1

USN-8261-1

USN-8265-1

USN-8440-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

Qla2Xxx Driver

References · 1604

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68818.json · Exploit
• https://ubuntu.com/security/CVE-2025-40171 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40111 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71162 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39883 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68264 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-47336 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23068 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39995 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40070 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8116-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23088 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40301 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23410 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23005 · Security Note