CVE-2025-68782

HighCVSS 7.5/10Last modified Nov 10, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: target: Reset t_task_cdb pointer in error case

If allocation of cmd->t_task_cdb fails, it remains NULL but is later dereferenced in the 'err' path.

In case of error, reset NULL t_task_cdb value to point at the default fixed-size buffer.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 9e95fb805dc043cc8ed878a08d1583e4097a5f80, < 6cac97b12bdab04832e0416d049efcd0d48d303b; >= 9e95fb805dc043cc8ed878a08d1583e4097a5f80, < 45fd86b444105c8bd07a763f58635c87e5dc7aea; >= 9e95fb805dc043cc8ed878a08d1583e4097a5f80, < 8727663ded659aad55eef21e3864ebf5a4796a96; >= 9e95fb805dc043cc8ed878a08d1583e4097a5f80, < 0260ad551b0815eb788d47f32899fbcd65d6f128; >= 9e95fb805dc043cc8ed878a08d1583e4097a5f80, < 0d36db68fdb8a3325386fd9523b67735f944e1f3; >= 9e95fb805dc043cc8ed878a08d1583e4097a5f80, < 8edbb9e371af186b4cf40819dab65fafe109df4d; >= 9e95fb805dc043cc8ed878a08d1583e4097a5f80, < 5053eab38a4c4543522d0c320c639c56a8b59908
LinuxLinux5.8
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.7, < *
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.7, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.7, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.7, < *
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.6, < *
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.7, < *

References

Timeline

Published
Jan 13, 2026
Last modified
Nov 10, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-68783In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-mixer: us16x08: validate meter packet indices get_meter_leveCVE-2025-68784In the Linux kernel, the following vulnerability has been resolved: xfs: fix a UAF problem in xattr repair The xchk_setup_xattr_buf functiCVE-2025-687857.1In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix middle attribute validation in push_nsh() action CVE-2025-68786In the Linux kernel, the following vulnerability has been resolved: ksmbd: skip lock-range check on equal size to avoid size==0 underflow CVE-2025-68787In the Linux kernel, the following vulnerability has been resolved: netrom: Fix memory leak in nr_sendmsg() syzbot reported a memory leak CVE-2025-68788In the Linux kernel, the following vulnerability has been resolved: fsnotify: do not generate ACCESS/MODIFY events on child for special filCVE-2025-68798.8A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been rated as critical. This issue affects some unknownCVE-2025-68790In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix double unregister of HCA_PORTS component Clear hca_devcoCVE-2025-68791In the Linux kernel, the following vulnerability has been resolved: fuse: missing copy_finish in fuse-over-io-uring argument copies Fix a CVE-2025-687927.8In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix out of range indexing in name_size 'name_size' doesCVE-2025-687937.8In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix a job->pasid access race in gpu recovery Avoid a possiCVE-2025-687949.8In the Linux kernel, the following vulnerability has been resolved: iomap: adjust read range correctly for non-block-aligned positions iom
CVE-2025-68782: High severity, CVSS 7.5 | Vulnix