CVE-2025-22066

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: imx-card: Add NULL check in imx_card_probe()

devm_kasprintf() returns NULL when memory allocation fails. Currently, imx_card_probe() does not check for this case, which results in a NULL pointer dereference.

Add NULL check after devm_kasprintf() to prevent this issue.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

VendorProductVersions
LinuxLinux>= aa736700f42fa0813e286ca2f9274ffaa25163b9, < 018e6cf2503e60087747b0ebc190e18b3640766f; >= aa736700f42fa0813e286ca2f9274ffaa25163b9, < 38253922a89a742e7e622f626b41c64388367361; >= aa736700f42fa0813e286ca2f9274ffaa25163b9, < e283a5bf4337a7300ac5e6ae363cc8b242a0b4b7; >= aa736700f42fa0813e286ca2f9274ffaa25163b9, < 4d8458e48ff135bddc402ad79821dc058ea163d0; >= aa736700f42fa0813e286ca2f9274ffaa25163b9, < b01700e08be99e3842570142ec5973ccd7e73eaf; >= aa736700f42fa0813e286ca2f9274ffaa25163b9, < dd2bbb9564d0d24a2643ad90008a79840368c4b4; >= aa736700f42fa0813e286ca2f9274ffaa25163b9, < 93d34608fd162f725172e780b1c60cc93a920719
LinuxLinux5.14

References

Timeline

Published
Apr 16, 2025
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-220677.8In the Linux kernel, the following vulnerability has been resolved: spi: cadence: Fix out-of-bounds array access in cdns_mrvl_xspi_setup_clCVE-2025-220687.8In the Linux kernel, the following vulnerability has been resolved: ublk: make sure ubq->canceling is set when queue is frozen Now ublk drCVE-2025-220697.8In the Linux kernel, the following vulnerability has been resolved: riscv: fgraph: Fix stack layout to match __arch_ftrace_regs argument ofCVE-2025-22074.8A vulnerability classified as problematic was found in aitangbao springboot-manager 3.0. This vulnerability affects unknown code of the fileCVE-2025-220705.5In the Linux kernel, the following vulnerability has been resolved: fs/9p: fix NULL pointer dereference on mkdir When a 9p tree was mounteCVE-2025-220715.5In the Linux kernel, the following vulnerability has been resolved: spufs: fix a leak in spufs_create_context() Leak fixes back in 2008 miCVE-2025-220725.5In the Linux kernel, the following vulnerability has been resolved: spufs: fix gang directory lifetimes prior to "[POWERPC] spufs: Fix ganCVE-2025-220735.5In the Linux kernel, the following vulnerability has been resolved: spufs: fix a leak on spufs_new_file() failure It's called from spufs_fCVE-2025-220745.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix r_count dec/increment mismatch r_count is only increased whCVE-2025-220755.5In the Linux kernel, the following vulnerability has been resolved: rtnetlink: Allocate vfinfo size for VF GUIDs when supported Commit 30aCVE-2025-220765.5In the Linux kernel, the following vulnerability has been resolved: exfat: fix missing shutdown check xfstests generic/730 test failed becCVE-2025-220775.5In the Linux kernel, the following vulnerability has been resolved: Revert "smb: client: fix TCP timers deadlock after rmmod" This reverts