CVE-2025-22054

Summary

In the Linux kernel, the following vulnerability has been resolved:

arcnet: Add NULL check in com20020pci_probe()

devm_kasprintf() returns NULL when memory allocation fails. Currently, com20020pci_probe() does not check for this case, which results in a NULL pointer dereference.

Add NULL check after devm_kasprintf() to prevent this issue and ensure no resources are left allocated.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxe38cd53421ed4e37fc99662a0f2a0c567993844f < 661cf5d102949898c931e81fd4e1c773afcdeafaaffected
LinuxLinuxd54f5a5bc85afd01b0a00689b795e31db54adc15 < 905a34dc1ad9a53a8aaaf8a759ea5dbaaa30418daffected
LinuxLinux75c53a4c43295fb8b09edae45239790db9cc69c3 < ef8b29398ea6061ac8257f3e45c9be45cc004ce2affected
LinuxLinux8d034da82563a526dbd7e9069bb3f6946403b72c < be8a0decd0b59a52a07276f9ef3b33ef820b2179affected
LinuxLinux5106d7adb74bc6160806b45ffd2321b10ca14ee0 < ececf8eff6c25acc239fa8f0fd837c76bc770547affected
LinuxLinux6b17a597fc2f13aaaa0a2780eb7edb9ae7ac9aea < ebebeb58d48e25525fa654f2c53a24713fe141c3affected
LinuxLinux6b17a597fc2f13aaaa0a2780eb7edb9ae7ac9aea < a654f31b33515d39bb56c75fd8b26bef025ced7eaffected
LinuxLinux6b17a597fc2f13aaaa0a2780eb7edb9ae7ac9aea < 887226163504494ea7e58033a97c2d2ab12e05d4affected
LinuxLinux6b17a597fc2f13aaaa0a2780eb7edb9ae7ac9aea < fda8c491db2a90ff3e6fbbae58e495b4ddddeca3affected
LinuxLinux2e4ad90b15a7341c2d96d2dc6df6d135d72256b6affected
LinuxLinux5.4.264 < 5.4.292affected
LinuxLinux5.10.204 < 5.10.236affected
LinuxLinux5.15.143 < 5.15.180affected
LinuxLinux6.1.68 < 6.1.134affected
LinuxLinux6.6.7 < 6.6.87affected
LinuxLinux4.19.302 < 4.20affected
LinuxLinux6.7affected
LinuxLinux0 < 6.7unaffected
LinuxLinux5.4.292 <= 5.4.*unaffected
LinuxLinux5.10.236 <= 5.10.*unaffected
LinuxLinux5.15.180 <= 5.15.*unaffected
LinuxLinux6.1.134 <= 6.1.*unaffected
LinuxLinux6.6.87 <= 6.6.*unaffected
LinuxLinux6.12.23 <= 6.12.*unaffected
LinuxLinux6.13.11 <= 6.13.*unaffected
LinuxLinux6.14.2 <= 6.14.*unaffected
LinuxLinux6.15 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References