CVE-2025-22066

ASoC: imx-card: Add NULL check in imx_card_probe()

State: Published
Severity: 5.5 Medium
Published: Apr 16, 2025
Updated: May 11, 2026
Reserved: Dec 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: imx-card: Add NULL check in imx_card_probe()

devm_kasprintf() returns NULL when memory allocation fails. Currently, imx_card_probe() does not check for this case, which results in a NULL pointer dereference.

Add NULL check after devm_kasprintf() to prevent this issue.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	aa736700f42fa0813e286ca2f9274ffaa25163b9 to before 018e6cf2503e60087747b0ebc190e18b3640766fAffected aa736700f42fa0813e286ca2f9274ffaa25163b9 to before 38253922a89a742e7e622f626b41c64388367361Affected aa736700f42fa0813e286ca2f9274ffaa25163b9 to before e283a5bf4337a7300ac5e6ae363cc8b242a0b4b7Affected aa736700f42fa0813e286ca2f9274ffaa25163b9 to before 4d8458e48ff135bddc402ad79821dc058ea163d0Affected aa736700f42fa0813e286ca2f9274ffaa25163b9 to before b01700e08be99e3842570142ec5973ccd7e73eafAffected aa736700f42fa0813e286ca2f9274ffaa25163b9 to before dd2bbb9564d0d24a2643ad90008a79840368c4b4Affected aa736700f42fa0813e286ca2f9274ffaa25163b9 to before 93d34608fd162f725172e780b1c60cc93a920719Affected
LinuxLinux	5.14Affected before 5.14Not affected 5.15.180 through 5.15.Not affected 6.1.134 through 6.1.Not affected 6.6.87 through 6.6.Not affected 6.12.23 through 6.12.Not affected 6.13.11 through 6.13.Not affected 6.14.2 through 6.14.Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

aa736700f42fa0813e286ca2f9274ffaa25163b9 to before 018e6cf2503e60087747b0ebc190e18b3640766fAffected
aa736700f42fa0813e286ca2f9274ffaa25163b9 to before 38253922a89a742e7e622f626b41c64388367361Affected
aa736700f42fa0813e286ca2f9274ffaa25163b9 to before e283a5bf4337a7300ac5e6ae363cc8b242a0b4b7Affected
aa736700f42fa0813e286ca2f9274ffaa25163b9 to before 4d8458e48ff135bddc402ad79821dc058ea163d0Affected
aa736700f42fa0813e286ca2f9274ffaa25163b9 to before b01700e08be99e3842570142ec5973ccd7e73eafAffected
aa736700f42fa0813e286ca2f9274ffaa25163b9 to before dd2bbb9564d0d24a2643ad90008a79840368c4b4Affected
aa736700f42fa0813e286ca2f9274ffaa25163b9 to before 93d34608fd162f725172e780b1c60cc93a920719Affected

LinuxLinux

5.14Affected
before 5.14Not affected
5.15.180 through 5.15.*Not affected
6.1.134 through 6.1.*Not affected
6.6.87 through 6.6.*Not affected
6.12.23 through 6.12.*Not affected
6.13.11 through 6.13.*Not affected
6.14.2 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.