CVE-2025-68229

A null pointer dereference was found in the SCSI target tcm_loop driver in the Linux kernel. If scsi_host allocation fails during tcm_loop_driver_probe(), the tl_hba->sh pointer remains NULL. Subsequent reads of the tpg_address configfs attribute trigger a segfault when dereferencing this NULL pointer.

tcm_loop is used for SCSI target testing and loopback configurations. The crash requires probe failure (e.g., memory pressure) followed by configfs attribute access.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the tcm_loop module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.