CVE-2025-22099: drm: xlnx: zynqmp_dpsub: Add NULL check in zynqmp_audio_init
In the Linux kernel, the following vulnerability has been resolved:
drm: xlnx: zynqmpdpsub: Add NULL check in zynqmpaudioinit
devmkasprintf() calls can return null pointers on failure. But some return values were not checked in zynqmpaudioinit().
Add NULL check in zynqmpaudioinit(), avoid referencing null pointers in the subsequent code.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22099?
CVE-2025-22099 has been classified as a moderate severity vulnerability in the Linux kernel affecting zynqmp_audio_init due to potential null pointer dereference.
How do I fix CVE-2025-22099?
To fix CVE-2025-22099, ensure that you are running an updated version of the Linux kernel where the vulnerability has been patched.
What systems are affected by CVE-2025-22099?
CVE-2025-22099 affects the Linux kernel, specifically systems utilizing the zynqmp audio initialization functionality.
What exploit methods are associated with CVE-2025-22099?
CVE-2025-22099 involves potential exploitation through NULL pointer dereference due to unverified return values from devm_kasprintf() in the zynqmp_audio_init function.
Has CVE-2025-22099 been mitigated in future releases?
Yes, CVE-2025-22099 has been resolved in subsequent releases of the Linux kernel.