CVE-2022-50866 — NULL Pointer Dereference in Linux
Severity
4.5MEDIUM
No vectorEPSS
0.1%
top 79.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 30
Description
In the Linux kernel, the following vulnerability has been resolved:
ASoC: pxa: fix null-pointer dereference in filter()
kasprintf() would return NULL pointer when kmalloc() fail to allocate.
Need to check the return pointer before calling strcmp().
Affected Packages4 packages
▶CVEListV5linux/linux7a824e214e25a49442fe868dac0af8a904b24f58 — 3ec75e0ea9550b8f2e531172f2e67ba9d5227ec3+9
🔴Vulnerability Details
3OSV▶
CVE-2022-50866: In the Linux kernel, the following vulnerability has been resolved: ASoC: pxa: fix null-pointer dereference in filter() kasprintf() would return NULL↗2025-12-30
GHSA▶
GHSA-c7hq-p57p-3cg2: In the Linux kernel, the following vulnerability has been resolved:
ASoC: pxa: fix null-pointer dereference in filter()
kasprintf() would return NUL↗2025-12-30