Vulnerability · Published Apr 16, 2025 · Assigned by Linux
CVE-2025-22054arcnet: Add NULL check in com20020pci_probe()
Medium 5.5
In plain English
A medium-severity null pointer dereference in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 86.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
In the Linux kernel, the following vulnerability has been resolved: arcnet: Add NULL check in com20020pci_probe() devm_kasprintf() returns NULL when memory allocation fails. Currently, com20020pci_probe() does not check for this case, which results in a NULL pointer dereference. Add NULL check after devm_kasprintf() to prevent this issue and ensure no resources are left allocated.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | linux | 6.1.135-1 | DEBIAN-CVE-2025-22054 |
| Debian:12 | linux | 6.1.135-1 | DSA-5907-1 |
| Debian:13 | linux | 6.12.25-1 | DEBIAN-CVE-2025-22054 |
| Debian:14 | linux | 6.12.25-1 | DEBIAN-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux | 5.15.0-142.152 | USN-7591-1 |
| Ubuntu:22.04:LTS | linux | 5.15.0-142.152 | UBUNTU-CVE-2025-22054 |
| Ubuntu:24.04:LTS | linux | 6.8.0-86.87 | USN-7835-1 |
| Ubuntu:24.04:LTS | linux | 6.8.0-86.87 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1086.93 | USN-7591-4 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1086.93 | UBUNTU-CVE-2025-22054 |
| Ubuntu:24.04:LTS | linux-aws | 6.8.0-1041.43 | UBUNTU-CVE-2025-22054 |
| Ubuntu:24.04:LTS | linux-aws | 6.8.0-1041.43 | USN-7835-1 |
| Ubuntu:22.04:LTS | linux-aws-5.19 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-aws-6.5 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-aws-6.8 | 6.8.0-1041.43~22.04.1 | USN-7835-6 |
| Ubuntu:22.04:LTS | linux-aws-6.8 | 6.8.0-1041.43~22.04.1 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1091.100 | USN-7597-1 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1091.100 | UBUNTU-CVE-2025-22054 |
| Ubuntu:24.04:LTS | linux-azure | 6.8.0-1041.47 | USN-7835-1 |
| Ubuntu:24.04:LTS | linux-azure | 6.8.0-1041.47 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-azure-5.19 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:24.04:LTS | linux-azure-6.11 | 6.11.0-1018.18~24.04.1 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-azure-6.5 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-azure-6.8 | 6.8.0-1041.47~22.04.1 | USN-7835-1 |
| Ubuntu:22.04:LTS | linux-azure-6.8 | 6.8.0-1041.47~22.04.1 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1091.100.1 | UBUNTU-CVE-2025-22054 |
| Ubuntu:25.10 | linux-azure-fde | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:24.04:LTS | linux-azure-nvidia | 6.8.0-1029.32 | USN-7940-2 |
| Ubuntu:24.04:LTS | linux-azure-nvidia | 6.8.0-1029.32 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1085.94 | USN-7591-1 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1085.94 | UBUNTU-CVE-2025-22054 |
| Ubuntu:24.04:LTS | linux-gcp | 6.8.0-1042.45 | USN-7835-1 |
| Ubuntu:24.04:LTS | linux-gcp | 6.8.0-1042.45 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-gcp-5.19 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:24.04:LTS | linux-gcp-6.11 | 6.11.0-1016.16~24.04.1 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-gcp-6.5 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-gcp-6.8 | 6.8.0-1042.45~22.04.1 | USN-7835-3 |
| Ubuntu:22.04:LTS | linux-gcp-6.8 | 6.8.0-1042.45~22.04.1 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1083.89 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1083.89 | USN-7591-1 |
| Ubuntu:24.04:LTS | linux-gke | 6.8.0-1038.43 | UBUNTU-CVE-2025-22054 |
| Ubuntu:24.04:LTS | linux-gke | 6.8.0-1038.43 | USN-7835-3 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1068.76 | USN-7591-1 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1068.76 | UBUNTU-CVE-2025-22054 |
| Ubuntu:24.04:LTS | linux-gkeop | 6.8.0-1025.28 | UBUNTU-CVE-2025-22054 |
| Ubuntu:24.04:LTS | linux-gkeop | 6.8.0-1025.28 | USN-7835-1 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:24.04:LTS | linux-hwe-6.11 | 6.11.0-28.28~24.04.1 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-hwe-6.5 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-hwe-6.8 | 6.8.0-86.87~22.04.1 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-hwe-6.8 | 6.8.0-86.87~22.04.1 | USN-7835-4 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1078.81 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1078.81 | USN-7591-1 |
| Ubuntu:24.04:LTS | linux-ibm | 6.8.0-1039.39 | USN-7835-1 |
| Ubuntu:24.04:LTS | linux-ibm | 6.8.0-1039.39 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-ibm-6.8 | 6.8.0-1039.39~22.04.1 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-ibm-6.8 | 6.8.0-1039.39~22.04.1 | USN-7835-1 |
| Ubuntu:24.04:LTS | linux-intel | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-intel-iot-realtime | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1081.87 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1081.87 | USN-7591-5 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1082.87 | USN-7591-1 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1082.87 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-142.152 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-142.152 | USN-7591-1 |
| Ubuntu:24.04:LTS | linux-lowlatency | 6.8.0-86.87.1 | UBUNTU-CVE-2025-22054 |
| Ubuntu:24.04:LTS | linux-lowlatency | 6.8.0-86.87.1 | USN-7835-1 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-5.19 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:24.04:LTS | linux-lowlatency-hwe-6.11 | 6.11.0-1015.16~24.04.2 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.5 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.8 | 6.8.0-86.87.1~22.04.1 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.8 | 6.8.0-86.87.1~22.04.1 | USN-7835-1 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1080.81 | USN-7591-1 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1080.81 | UBUNTU-CVE-2025-22054 |
| Ubuntu:24.04:LTS | linux-nvidia | 6.8.0-1041.44 | USN-7835-3 |
| Ubuntu:24.04:LTS | linux-nvidia | 6.8.0-1041.44 | UBUNTU-CVE-2025-22054 |
| Ubuntu:24.04:LTS | linux-nvidia-6.11 | 6.11.0-1012.12 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-nvidia-6.5 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-nvidia-6.8 | 6.8.0-1041.44~22.04.2 | USN-7835-3 |
| Ubuntu:22.04:LTS | linux-nvidia-6.8 | 6.8.0-1041.44~22.04.2 | UBUNTU-CVE-2025-22054 |
| Ubuntu:24.04:LTS | linux-nvidia-lowlatency | 6.8.0-1041.44.1 | USN-7835-3 |
| Ubuntu:24.04:LTS | linux-nvidia-lowlatency | 6.8.0-1041.44.1 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra | 5.15.0-1039.39 | USN-7591-1 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra | 5.15.0-1039.39 | UBUNTU-CVE-2025-22054 |
| Ubuntu:24.04:LTS | linux-nvidia-tegra | 6.8.0-1012.12 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra-igx | 5.15.0-1028.28 | USN-7591-1 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra-igx | 5.15.0-1028.28 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:24.04:LTS | linux-oem-6.11 | 6.11.0-1024.24 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-oem-6.5 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:24.04:LTS | linux-oem-6.8 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1083.89 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1083.89 | USN-7591-1 |
| Ubuntu:24.04:LTS | linux-oracle | 6.8.0-1038.39 | USN-7835-1 |
| Ubuntu:24.04:LTS | linux-oracle | 6.8.0-1038.39 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-oracle-6.5 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-oracle-6.8 | 6.8.0-1038.39~22.04.1 | USN-7835-5 |
| Ubuntu:22.04:LTS | linux-oracle-6.8 | 6.8.0-1038.39~22.04.1 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1080.83 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1080.83 | USN-7591-6 |
| Ubuntu:24.04:LTS | linux-raspi | 6.8.0-1041.45 | USN-7887-2 |
| Ubuntu:24.04:LTS | linux-raspi | 6.8.0-1041.45 | UBUNTU-CVE-2025-22054 |
| Ubuntu:24.04:LTS | linux-raspi-realtime | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:24.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:24.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-riscv-6.5 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-riscv-6.8 | 6.8.0-86.87~22.04.1 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-starfive-6.2 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-starfive-6.5 | no fix listed | UBUNTU-CVE-2025-22054 |
| Ubuntu:24.04:LTS | linux-xilinx | 6.8.0-1018.19 | UBUNTU-CVE-2025-22054 |
| Ubuntu:22.04:LTS | linux-xilinx-zynqmp | 5.15.0-1050.54 | UBUNTU-CVE-2025-22054 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | e38cd53421ed4e37fc99662a0f2a0c567993844f – before 661cf5d102949898c931e81fd4e1c773afcdeafad54f5a5bc85afd01b0a00689b795e31db54adc15 – before 905a34dc1ad9a53a8aaaf8a759ea5dbaaa30418d75c53a4c43295fb8b09edae45239790db9cc69c3 – before ef8b29398ea6061ac8257f3e45c9be45cc004ce28d034da82563a526dbd7e9069bb3f6946403b72c – before be8a0decd0b59a52a07276f9ef3b33ef820b21795106d7adb74bc6160806b45ffd2321b10ca14ee0 – before ececf8eff6c25acc239fa8f0fd837c76bc7705476b17a597fc2f13aaaa0a2780eb7edb9ae7ac9aea – before ebebeb58d48e25525fa654f2c53a24713fe141c36b17a597fc2f13aaaa0a2780eb7edb9ae7ac9aea – before a654f31b33515d39bb56c75fd8b26bef025ced7e6b17a597fc2f13aaaa0a2780eb7edb9ae7ac9aea – before 887226163504494ea7e58033a97c2d2ab12e05d4 |
| Linux | Linux | 6.7 |
Weakness: CWE-476 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References
- https://git.kernel.org/stable/c/661cf5d102949898c931e81fd4e1c773afcdeafa
- https://git.kernel.org/stable/c/905a34dc1ad9a53a8aaaf8a759ea5dbaaa30418d
- https://git.kernel.org/stable/c/ef8b29398ea6061ac8257f3e45c9be45cc004ce2
- https://git.kernel.org/stable/c/be8a0decd0b59a52a07276f9ef3b33ef820b2179
- https://git.kernel.org/stable/c/ececf8eff6c25acc239fa8f0fd837c76bc770547
- https://git.kernel.org/stable/c/ebebeb58d48e25525fa654f2c53a24713fe141c3
- https://git.kernel.org/stable/c/a654f31b33515d39bb56c75fd8b26bef025ced7e
- https://git.kernel.org/stable/c/887226163504494ea7e58033a97c2d2ab12e05d4
- https://git.kernel.org/stable/c/fda8c491db2a90ff3e6fbbae58e495b4ddddeca3
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html