PT-2025-53984 · Linux+2 · Linux Kernel+2
Published
2022-11-14
·
Updated
2026-02-24
·
CVE-2022-50866
CVSS v2.0
3.5
Low
| Vector | AV:L/AC:H/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel's ASoC (Advanced Linux Sound Architecture) pxa module. Specifically, a null-pointer dereference can occur within the
filter() function. This happens when kasprintf() fails to allocate memory and returns a NULL pointer, which is then used in a subsequent strcmp() comparison without proper validation.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Centos
Linux Kernel
Red Hat