What’s Vulnerable › Vulnerabilities

CVE-2022-50866: ASoC: pxa: fix null-pointer dereference in filter()

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-30 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: pxa: fix null-pointer dereference in filter() kasprintf() would return NULL pointer when kmalloc() fail to allocate. Need to check the return pointer before calling strcmp().

Affected products

• Linux kernel: 3.6 — fixed in 6.2

How to fix

Upgrade to a fixed version: Linux kernel 6.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0abd1d78317a3a2dfe00b203fbf14ee7df537e0a
• https://git.kernel.org/stable/c/21a1409e8cf73053b54f7860548e3043dfa351a9
• https://git.kernel.org/stable/c/21b92cf41952577a95bfa430e39478cbd66e42a7
• https://git.kernel.org/stable/c/3ec75e0ea9550b8f2e531172f2e67ba9d5227ec3
• https://git.kernel.org/stable/c/5b510a82740d2a42a75b5661b402bcaf8ae22cd5
• https://git.kernel.org/stable/c/83baa509396a742e0ce145b09fde1ce0a948f49a
• https://git.kernel.org/stable/c/9fb9b3b67a5b8669296d6372cd901ef86557e6f6
• https://git.kernel.org/stable/c/a8baccb79de2f48a2083d51febf627eb50ce1898
• https://git.kernel.org/stable/c/ec7bf231aaa1bdbcb69d23bc50c753c80fb22429

Get alerted when CVE-2022-50866 or the next vulnerability affects your stack