PT-2025-53984 · Linux+2 · Linux Kernel+2

Published

2022-11-14

·

Updated

2026-02-24

·

CVE-2022-50866

CVSS v2.0

3.5

Low

VectorAV:L/AC:H/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the Linux kernel's ASoC (Advanced Linux Sound Architecture) pxa module. Specifically, a null-pointer dereference can occur within the filter() function. This happens when kasprintf() fails to allocate memory and returns a NULL pointer, which is then used in a subsequent strcmp() comparison without proper validation.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-01314
CVE-2022-50866
RHSA-2023:2458
RHSA-2023:2951
SUSE-SU-2026:0263-1
SUSE-SU-2026:0317-1
SUSE-SU-2026:0411-1
SUSE-SU-2026:0617-1

Affected Products

Centos
Linux Kernel
Red Hat