CVE-2025-22054 - CVE House
Back to Database
Status published Unknown CVE-2025-22054

arcnet: Add NULL check in com20020pci_probe()

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: arcnet: Add NULL check in com20020pci_probe() devm_kasprintf() returns NULL when memory allocation fails. Currently, com20020pci_probe() does not check for this case, which results in a NULL pointer dereference. Add NULL check after devm_kasprintf() to prevent this issue and ensure no resources are left allocated.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-22054

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Linux
Vulnerable Versions:
e38cd53421ed4e37fc99662a0f2a0c567993844f, d54f5a5bc85afd01b0a00689b795e31db54adc15, 75c53a4c43295fb8b09edae45239790db9cc69c3, 8d034da82563a526dbd7e9069bb3f6946403b72c, 5106d7adb74bc6160806b45ffd2321b10ca14ee0, 6b17a597fc2f13aaaa0a2780eb7edb9ae7ac9aea, 2e4ad90b15a7341c2d96d2dc6df6d135d72256b6, 5.4.264, 5.10.204, 5.15.143, 6.1.68, 6.6.7, 4.19.302, 6.7, 0, 5.4.292, 5.10.236, 5.15.180, 6.1.134, 6.6.87, 6.12.23, 6.13.11, 6.14.2, 6.15

Timeline

Official Publish: April 16th, 2025
Last Modified: May 23rd, 2026
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.