CVE-2025-22066: ASoC: imx-card: Add NULL check in imx_card_probe()
Published Apr 16, 2025
·Updated
ASoC: imx-card: Add NULL check in imxcardprobe()
Affected Software
9 affected componentsFixes available
Linux Linux kernel
Linux Linux kernel>=5.14<5.15.180
Linux Linux kernel>=5.16<6.1.134
Linux Linux kernel>=6.2<6.6.87
Linux Linux kernel>=6.7<6.12.23
Linux Linux kernel>=6.13<6.13.11
Linux Linux kernel>=6.14<6.14.2
Microsoft azl3 kernel 6.6.92.2-1
Microsoft azl3 kernel 6.6.85.1-4
Remediation
Event History
Apr 16, 2025
CVE Published
via MITRE·02:12 PM
Data Sourced
via MITRE·02:12 PM
Description
Data Sourced
via NVD·03:16 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jul 11, 2025
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2025-22066?
CVE-2025-22066 has been classified with medium severity due to the potential for a NULL pointer dereference.
2
How do I fix CVE-2025-22066?
To fix CVE-2025-22066, update the Linux kernel to the latest stable version where the NULL check in imx_card_probe() is implemented.
3
Which systems are affected by CVE-2025-22066?
CVE-2025-22066 affects the Linux kernel, specifically systems utilizing the ASoC imx-card functionality.
4
What are the potential impacts of CVE-2025-22066?
The exploitation of CVE-2025-22066 could lead to system crashes or unexpected behaviors due to null pointer dereferences.
5
Is there a workaround for CVE-2025-22066?
Currently, the recommended approach for CVE-2025-22066 is to apply the patch or upgrade the Linux kernel as no official workarounds are provided.