CVE-2025-22054

Published Apr 16, 2025

Last updated 2 months ago

CVSS medium 5.5

Overview

Description: In the Linux kernel, the following vulnerability has been resolved: arcnet: Add NULL check in com20020pci_probe() devm_kasprintf() returns NULL when memory allocation fails. Currently, com20020pci_probe() does not check for this case, which results in a NULL pointer dereference. Add NULL check after devm_kasprintf() to prevent this issue and ensure no resources are left allocated.
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 5.5
Impact score: 3.6
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Severity: MEDIUM

Weaknesses

nvd@nist.gov: CWE-476

Hype score: Not currently trending

CVE-2025-22054 In the Linux kernel, the following vulnerability has been resolved: arcnet: Add NULL check in com20020pci_probe() devm_kasprintf() returns NULL when memory allocati… https://t.co/CksqeGmKcZ
@CVEnew
19 Apr 2025
140 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2AB35967-8241-4BF5-B781-B331B439E208",
            "versionEndExcluding": "4.20",
            "versionStartIncluding": "4.19.302"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "466839A4-3C33-47A2-B10A-2E6458F6402B",
            "versionEndExcluding": "5.4.292",
            "versionStartIncluding": "5.4.264"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6D92647B-3F46-4C6E-AF9A-2CF8EB5481CB",
            "versionEndExcluding": "5.10.236",
            "versionStartIncluding": "5.10.204"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2B613361-61A7-44A1-A33A-16F2CAE3FC63",
            "versionEndExcluding": "5.15.180",
            "versionStartIncluding": "5.15.143"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A47C1E9A-84FB-4B9B-8BD3-A68A56324DC3",
            "versionEndExcluding": "6.1.134",
            "versionStartIncluding": "6.1.68"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2C5C554F-6530-44F2-9591-63A8A54CAF02",
            "versionEndExcluding": "6.6.87",
            "versionStartIncluding": "6.6.7"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "26CAB76D-F00F-43CE-BEAD-7097F8FB1D6C",
            "versionEndExcluding": "6.12.23",
            "versionStartIncluding": "6.7"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E7E864B0-8C00-4679-BA55-659B4C9C3AD3",
            "versionEndExcluding": "6.13.11",
            "versionStartIncluding": "6.13"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FADAE5D8-4808-442C-B218-77B2CE8780A0",
            "versionEndExcluding": "6.14.2",
            "versionStartIncluding": "6.14"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.

Overview

Risk scores

CVSS 3.1

Weaknesses

Social media

Configurations

References