CVE-2022-50866

ASoC: pxa: fix null-pointer dereference in filter()

State: Published
Severity: Not scored
Published: Dec 30, 2025
Updated: May 11, 2026
Reserved: Dec 30, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: pxa: fix null-pointer dereference in filter()

kasprintf() would return NULL pointer when kmalloc() fail to allocate. Need to check the return pointer before calling strcmp().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	7a824e214e25a49442fe868dac0af8a904b24f58 to before 3ec75e0ea9550b8f2e531172f2e67ba9d5227ec3Affected 7a824e214e25a49442fe868dac0af8a904b24f58 to before 5b510a82740d2a42a75b5661b402bcaf8ae22cd5Affected 7a824e214e25a49442fe868dac0af8a904b24f58 to before 0abd1d78317a3a2dfe00b203fbf14ee7df537e0aAffected 7a824e214e25a49442fe868dac0af8a904b24f58 to before a8baccb79de2f48a2083d51febf627eb50ce1898Affected 7a824e214e25a49442fe868dac0af8a904b24f58 to before 21a1409e8cf73053b54f7860548e3043dfa351a9Affected 7a824e214e25a49442fe868dac0af8a904b24f58 to before 83baa509396a742e0ce145b09fde1ce0a948f49aAffected 7a824e214e25a49442fe868dac0af8a904b24f58 to before 9fb9b3b67a5b8669296d6372cd901ef86557e6f6Affected 7a824e214e25a49442fe868dac0af8a904b24f58 to before 21b92cf41952577a95bfa430e39478cbd66e42a7Affected 7a824e214e25a49442fe868dac0af8a904b24f58 to before ec7bf231aaa1bdbcb69d23bc50c753c80fb22429Affected
LinuxLinux	3.6Affected before 3.6Not affected 4.9.337 through 4.9.Not affected 4.14.303 through 4.14.Not affected 4.19.270 through 4.19.Not affected 5.4.229 through 5.4.Not affected 5.10.163 through 5.10.Not affected 5.15.86 through 5.15.Not affected 6.0.16 through 6.0.Not affected 6.1.2 through 6.1.Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

7a824e214e25a49442fe868dac0af8a904b24f58 to before 3ec75e0ea9550b8f2e531172f2e67ba9d5227ec3Affected
7a824e214e25a49442fe868dac0af8a904b24f58 to before 5b510a82740d2a42a75b5661b402bcaf8ae22cd5Affected
7a824e214e25a49442fe868dac0af8a904b24f58 to before 0abd1d78317a3a2dfe00b203fbf14ee7df537e0aAffected
7a824e214e25a49442fe868dac0af8a904b24f58 to before a8baccb79de2f48a2083d51febf627eb50ce1898Affected
7a824e214e25a49442fe868dac0af8a904b24f58 to before 21a1409e8cf73053b54f7860548e3043dfa351a9Affected
7a824e214e25a49442fe868dac0af8a904b24f58 to before 83baa509396a742e0ce145b09fde1ce0a948f49aAffected
7a824e214e25a49442fe868dac0af8a904b24f58 to before 9fb9b3b67a5b8669296d6372cd901ef86557e6f6Affected
7a824e214e25a49442fe868dac0af8a904b24f58 to before 21b92cf41952577a95bfa430e39478cbd66e42a7Affected
7a824e214e25a49442fe868dac0af8a904b24f58 to before ec7bf231aaa1bdbcb69d23bc50c753c80fb22429Affected

LinuxLinux

3.6Affected
before 3.6Not affected
4.9.337 through 4.9.*Not affected
4.14.303 through 4.14.*Not affected
4.19.270 through 4.19.*Not affected
5.4.229 through 5.4.*Not affected
5.10.163 through 5.10.*Not affected
5.15.86 through 5.15.*Not affected
6.0.16 through 6.0.*Not affected
6.1.2 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.