CVE-2022-50866
published 2025-12-30CVE-2022-50866: In the Linux kernel, the following vulnerability has been resolved: ASoC: pxa: fix null-pointer dereference in filter() kasprintf() would return NULL pointer…
PriorityP419medium4.5
EPSS
0.20%
10.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
ASoC: pxa: fix null-pointer dereference in filter()
kasprintf() would return NULL pointer when kmalloc() fail to allocate.
Need to check the return pointer before calling strcmp().
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.4-1 (bookworm) | linux 6.1.4-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 7a824e214e25a49442fe868dac0af8a904b24f58 < 3ec75e0ea9550b8f2e531172f2e67ba9d5227ec3 | 3ec75e0ea9550b8f2e531172f2e67ba9d5227ec3 |
| linux | linux | >= 7a824e214e25a49442fe868dac0af8a904b24f58 < 5b510a82740d2a42a75b5661b402bcaf8ae22cd5 | 5b510a82740d2a42a75b5661b402bcaf8ae22cd5 |
| linux | linux | >= 7a824e214e25a49442fe868dac0af8a904b24f58 < 0abd1d78317a3a2dfe00b203fbf14ee7df537e0a | 0abd1d78317a3a2dfe00b203fbf14ee7df537e0a |
| linux | linux | >= 7a824e214e25a49442fe868dac0af8a904b24f58 < a8baccb79de2f48a2083d51febf627eb50ce1898 | a8baccb79de2f48a2083d51febf627eb50ce1898 |
| linux | linux | >= 7a824e214e25a49442fe868dac0af8a904b24f58 < 21a1409e8cf73053b54f7860548e3043dfa351a9 | 21a1409e8cf73053b54f7860548e3043dfa351a9 |
| linux | linux | >= 7a824e214e25a49442fe868dac0af8a904b24f58 < 83baa509396a742e0ce145b09fde1ce0a948f49a | 83baa509396a742e0ce145b09fde1ce0a948f49a |
| linux | linux | >= 7a824e214e25a49442fe868dac0af8a904b24f58 < 9fb9b3b67a5b8669296d6372cd901ef86557e6f6 | 9fb9b3b67a5b8669296d6372cd901ef86557e6f6 |
| linux | linux | >= 7a824e214e25a49442fe868dac0af8a904b24f58 < 21b92cf41952577a95bfa430e39478cbd66e42a7 | 21b92cf41952577a95bfa430e39478cbd66e42a7 |
| linux | linux | >= 7a824e214e25a49442fe868dac0af8a904b24f58 < ec7bf231aaa1bdbcb69d23bc50c753c80fb22429 | ec7bf231aaa1bdbcb69d23bc50c753c80fb22429 |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 3.6.0 < 4.9.337 | 4.9.337 |
| linux | linux_kernel | >= 4.10.0 < 4.14.303 | 4.14.303 |
| linux | linux_kernel | >= 4.15.0 < 4.19.270 | 4.19.270 |
| linux | linux_kernel | >= 4.20.0 < 5.4.229 | 5.4.229 |
| linux | linux_kernel | >= 5.11.0 < 5.15.86 | 5.15.86 |
| linux | linux_kernel | >= 5.16.0 < 6.0.16 | 6.0.16 |
| linux | linux_kernel | >= 5.5.0 < 5.10.163 | 5.10.163 |
| linux | linux_kernel | >= 6.1.0 < 6.1.2 | 6.1.2 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: ASoC: pxa: fix null-pointer dereference in filter()
vendor_redhat·2025-12-30·CVSS 4.5
CVE-2022-50866 [MEDIUM] CWE-476 kernel: ASoC: pxa: fix null-pointer dereference in filter()
kernel: ASoC: pxa: fix null-pointer dereference in filter()
In the Linux kernel, the following vulnerability has been resolved:
ASoC: pxa: fix null-pointer dereference in filter()
kasprintf() would return NULL pointer when kmalloc() fail to allocate.
Need to check the return pointer before calling strcmp().
A flaw was found in the Linux kernel ASoC pxa audio driver. The function filter() used kasprintf() to allocate a formatted string but did not check whether the allocation succeeded before passing the result to strcmp(). If memory allocation fails and kasprintf() returns NULL, this results in a NULL pointer dereference when calling strcmp(), which can trigger a kernel crash and denial of service.
Mitigation: Mitigation for this issue is either not available or the currently available
Debian
CVE-2022-50866: linux - In the Linux kernel, the following vulnerability has been resolved: ASoC: pxa: ...
vendor_debian·2022
CVE-2022-50866 CVE-2022-50866: linux - In the Linux kernel, the following vulnerability has been resolved: ASoC: pxa: ...
In the Linux kernel, the following vulnerability has been resolved: ASoC: pxa: fix null-pointer dereference in filter() kasprintf() would return NULL pointer when kmalloc() fail to allocate. Need to check the return pointer before calling strcmp().
Scope: local
bookworm: resolved (fixed in 6.1.4-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.4-1)
sid: resolved (fixed in 6.1.4-1)
trixie: resolved (fixed in 6.1.4-1)
OSV
CVE-2022-50866: In the Linux kernel, the following vulnerability has been resolved: ASoC: pxa: fix null-pointer dereference in filter() kasprintf() would return NULL
osv·2025-12-30
CVE-2022-50866 CVE-2022-50866: In the Linux kernel, the following vulnerability has been resolved: ASoC: pxa: fix null-pointer dereference in filter() kasprintf() would return NULL
In the Linux kernel, the following vulnerability has been resolved: ASoC: pxa: fix null-pointer dereference in filter() kasprintf() would return NULL pointer when kmalloc() fail to allocate. Need to check the return pointer before calling strcmp().
OSV
ASoC: pxa: fix null-pointer dereference in filter()
osv·2025-12-30
CVE-2022-50866 ASoC: pxa: fix null-pointer dereference in filter()
ASoC: pxa: fix null-pointer dereference in filter()
In the Linux kernel, the following vulnerability has been resolved:
ASoC: pxa: fix null-pointer dereference in filter()
kasprintf() would return NULL pointer when kmalloc() fail to allocate.
Need to check the return pointer before calling strcmp().
GHSA
GHSA-c7hq-p57p-3cg2: In the Linux kernel, the following vulnerability has been resolved:
ASoC: pxa: fix null-pointer dereference in filter()
kasprintf() would return NUL
ghsa_unreviewed·2025-12-30
CVE-2022-50866 GHSA-c7hq-p57p-3cg2: In the Linux kernel, the following vulnerability has been resolved:
ASoC: pxa: fix null-pointer dereference in filter()
kasprintf() would return NUL
In the Linux kernel, the following vulnerability has been resolved:
ASoC: pxa: fix null-pointer dereference in filter()
kasprintf() would return NULL pointer when kmalloc() fail to allocate.
Need to check the return pointer before calling strcmp().
No detection rules found.
No public exploits indexed.
Wiz
CVE-2022-50866 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2022-50866 CVE-2022-50866 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2022-50866 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
ASoC: pxa: fix null-pointer dereference in filter()
kasprintf() would return NULL pointer when kmalloc() fail to allocate.
Need to check the return pointer before calling strcmp().
Source : NVD
Published December 30, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 20.3
Exploitation Probability (EPSS) 0.1
Affected packages and libraries
kernel-devel
bpftool
Sources
NVD
Debian 11, 12, 13, 14 Has Fix Added at: Dec 31, 2025
Echo Has Fix Added at: Dec 31, 2025
Red Hat 8 Severity ME
Bugzilla
CVE-2022-50866 kernel: ASoC: pxa: fix null-pointer dereference in filter()
bugzilla·2025-12-30
CVE-2022-50866 [MEDIUM] CVE-2022-50866 kernel: ASoC: pxa: fix null-pointer dereference in filter()
CVE-2022-50866 kernel: ASoC: pxa: fix null-pointer dereference in filter()
In the Linux kernel, the following vulnerability has been resolved:
ASoC: pxa: fix null-pointer dereference in filter()
kasprintf() would return NULL pointer when kmalloc() fail to allocate.
Need to check the return pointer before calling strcmp().
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025123049-CVE-2022-50866-6082@gregkh/T
https://git.kernel.org/stable/c/0abd1d78317a3a2dfe00b203fbf14ee7df537e0ahttps://git.kernel.org/stable/c/21a1409e8cf73053b54f7860548e3043dfa351a9https://git.kernel.org/stable/c/21b92cf41952577a95bfa430e39478cbd66e42a7https://git.kernel.org/stable/c/3ec75e0ea9550b8f2e531172f2e67ba9d5227ec3https://git.kernel.org/stable/c/5b510a82740d2a42a75b5661b402bcaf8ae22cd5https://git.kernel.org/stable/c/83baa509396a742e0ce145b09fde1ce0a948f49ahttps://git.kernel.org/stable/c/9fb9b3b67a5b8669296d6372cd901ef86557e6f6https://git.kernel.org/stable/c/a8baccb79de2f48a2083d51febf627eb50ce1898https://git.kernel.org/stable/c/ec7bf231aaa1bdbcb69d23bc50c753c80fb22429
2025-12-30
Published