CVE-2025-22066

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Apr 16, 2025
Updated: May 6, 2025
CWE ID 476

Summary

CVE-2025-22066 is a vulnerability in the Linux kernel that affects the ASoC (Advanced Simple Sound Architecture) driver for Allwinner Technology's imx-card. The issue lies in the function imx_card_probe(), which calls devm_kasprintf() for memory allocation. However, if devm_kasprintf() fails and returns NULL, imx_card_probe() does not check for this case, resulting in a NULL pointer dereference. This vulnerability has been resolved by adding a NULL check after devm_kasprintf() to prevent the issue.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share