CVE-2025-22054

arcnet: Add NULL check in com20020pci_probe()

State: Published
Severity: 5.5 Medium
Published: Apr 16, 2025
Updated: May 23, 2026
Reserved: Dec 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

arcnet: Add NULL check in com20020pci_probe()

devm_kasprintf() returns NULL when memory allocation fails. Currently, com20020pci_probe() does not check for this case, which results in a NULL pointer dereference.

Add NULL check after devm_kasprintf() to prevent this issue and ensure no resources are left allocated.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	e38cd53421ed4e37fc99662a0f2a0c567993844f to before 661cf5d102949898c931e81fd4e1c773afcdeafaAffected d54f5a5bc85afd01b0a00689b795e31db54adc15 to before 905a34dc1ad9a53a8aaaf8a759ea5dbaaa30418dAffected 75c53a4c43295fb8b09edae45239790db9cc69c3 to before ef8b29398ea6061ac8257f3e45c9be45cc004ce2Affected 8d034da82563a526dbd7e9069bb3f6946403b72c to before be8a0decd0b59a52a07276f9ef3b33ef820b2179Affected 5106d7adb74bc6160806b45ffd2321b10ca14ee0 to before ececf8eff6c25acc239fa8f0fd837c76bc770547Affected 6b17a597fc2f13aaaa0a2780eb7edb9ae7ac9aea to before ebebeb58d48e25525fa654f2c53a24713fe141c3Affected 6b17a597fc2f13aaaa0a2780eb7edb9ae7ac9aea to before a654f31b33515d39bb56c75fd8b26bef025ced7eAffected 6b17a597fc2f13aaaa0a2780eb7edb9ae7ac9aea to before 887226163504494ea7e58033a97c2d2ab12e05d4Affected 6b17a597fc2f13aaaa0a2780eb7edb9ae7ac9aea to before fda8c491db2a90ff3e6fbbae58e495b4ddddeca3Affected 2e4ad90b15a7341c2d96d2dc6df6d135d72256b6Affected 5.4.264 to before 5.4.292Affected 5.10.204 to before 5.10.236Affected 5.15.143 to before 5.15.180Affected 6.1.68 to before 6.1.134Affected 6.6.7 to before 6.6.87Affected 4.19.302 to before 4.20Affected
LinuxLinux	6.7Affected before 6.7Not affected 5.4.292 through 5.4.Not affected 5.10.236 through 5.10.Not affected 5.15.180 through 5.15.Not affected 6.1.134 through 6.1.Not affected 6.6.87 through 6.6.Not affected 6.12.23 through 6.12.Not affected 6.13.11 through 6.13.Not affected 6.14.2 through 6.14.Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

e38cd53421ed4e37fc99662a0f2a0c567993844f to before 661cf5d102949898c931e81fd4e1c773afcdeafaAffected
d54f5a5bc85afd01b0a00689b795e31db54adc15 to before 905a34dc1ad9a53a8aaaf8a759ea5dbaaa30418dAffected
75c53a4c43295fb8b09edae45239790db9cc69c3 to before ef8b29398ea6061ac8257f3e45c9be45cc004ce2Affected
8d034da82563a526dbd7e9069bb3f6946403b72c to before be8a0decd0b59a52a07276f9ef3b33ef820b2179Affected
5106d7adb74bc6160806b45ffd2321b10ca14ee0 to before ececf8eff6c25acc239fa8f0fd837c76bc770547Affected
6b17a597fc2f13aaaa0a2780eb7edb9ae7ac9aea to before ebebeb58d48e25525fa654f2c53a24713fe141c3Affected
6b17a597fc2f13aaaa0a2780eb7edb9ae7ac9aea to before a654f31b33515d39bb56c75fd8b26bef025ced7eAffected
6b17a597fc2f13aaaa0a2780eb7edb9ae7ac9aea to before 887226163504494ea7e58033a97c2d2ab12e05d4Affected
6b17a597fc2f13aaaa0a2780eb7edb9ae7ac9aea to before fda8c491db2a90ff3e6fbbae58e495b4ddddeca3Affected
2e4ad90b15a7341c2d96d2dc6df6d135d72256b6Affected
5.4.264 to before 5.4.292Affected
5.10.204 to before 5.10.236Affected
5.15.143 to before 5.15.180Affected
6.1.68 to before 6.1.134Affected
6.6.7 to before 6.6.87Affected
4.19.302 to before 4.20Affected

LinuxLinux

6.7Affected
before 6.7Not affected
5.4.292 through 5.4.*Not affected
5.10.236 through 5.10.*Not affected
5.15.180 through 5.15.*Not affected
6.1.134 through 6.1.*Not affected
6.6.87 through 6.6.*Not affected
6.12.23 through 6.12.*Not affected
6.13.11 through 6.13.*Not affected
6.14.2 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.