CVE-2025-22066

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference issue has been identified in the Linux kernel, specifically in the ASoC: imx-card component. The devm kasprintf() function returns NULL when memory allocation fails, but the imx card probe() function does not check for this case, resulting in a NULL pointer dereference. To prevent this issue, a NULL check has been added after devm kasprintf().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.