5.5

CVE-2025-22054: linux NULL Pointer Dereference

CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2025-22054DEBIAN-CVE-2025-22054
Published 16-04-2025Last modified 23-05-2026
Open JSON

Vulnerability summary

CVE-2025-22054 is a medium (CVSS 5.5) NULL Pointer Dereference vulnerability in linux. EPSS estimates a 0.23% chance of exploitation in the next 30 days, higher than 12.7% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.23%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 43 · Related 38
DLA-4178-1DLA-4193-1DSA-5907-1MGASA-2025-0142MGASA-2025-0146USN-7585-1

Timeline

  1. 16-04-2025
    PublishedVulnerability first disclosed.
  2. 23-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: arcnet: Add NULL check in com20020pci_probe() devm_kasprintf() returns NULL when memory allocation fails. Currently, com20020pci_probe() does not check for this case, which results in a NULL pointer dereference. Add NULL check after devm_kasprintf() to prevent this issue and ensure no resources are left allocated.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.23%

Chance of exploitation in the next 30 days

Percentile

13%

Versus all other CVEs

30-day change

0.00 pp

From 0.23% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.23%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu133 products
  • linux< 5.4.0-218.238 | < 5.15.0-142.152 | < 6.8.0-86.87
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 5.4.0-1147.157 | < 5.15.0-1086.93 | < 6.8.0-1041.43
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ e38cd53421ed4e37fc99662a0f2a0c567993844f, < 661cf5d102949898c931e81fd4e1c773afcdeafa | ≥ d54f5a5bc85afd01b0a00689b795e31db54adc15, < 905a34dc1ad9a53a8aaaf8a759ea5dbaaa30418d | ≥ 75c53a4c43295fb8b09edae45239790db9cc69c3, < ef8b29398ea6061ac8257f3e45c9be45cc004ce2 | ≥ 8d034da82563a526dbd7e9069bb3f6946403b72c, < be8a0decd0b59a52a07276f9ef3b33ef820b2179 | ≥ 5106d7adb74bc6160806b45ffd2321b10ca14ee0, < ececf8eff6c25acc239fa8f0fd837c76bc770547 | ≥ 6b17a597fc2f13aaaa0a2780eb7edb9ae7ac9aea, < ebebeb58d48e25525fa654f2c53a24713fe141c3 | ≥ 6b17a597fc2f13aaaa0a2780eb7edb9ae7ac9aea, < a654f31b33515d39bb56c75fd8b26bef025ced7e | ≥ 6b17a597fc2f13aaaa0a2780eb7edb9ae7ac9aea, < 887226163504494ea7e58033a97c2d2ab12e05d4 | ≥ 6b17a597fc2f13aaaa0a2780eb7edb9ae7ac9aea, < fda8c491db2a90ff3e6fbbae58e495b4ddddeca3 | 2e4ad90b15a7341c2d96d2dc6df6d135d72256b6 | ≥ 5.4.264, < 5.4.292 | ≥ 5.10.204, < 5.10.236 | ≥ 5.15.143, < 5.15.180 | ≥ 6.1.68, < 6.1.134 | ≥ 6.6.7, < 6.6.87 | ≥ 4.19.302, < 4.20 | 6.7
  • linux_kernel≥ 4.19.302, < 4.20 | ≥ 5.4.264, < 5.4.292 | ≥ 5.10.204, < 5.10.236 | ≥ 5.15.143, < 5.15.180 | ≥ 6.1.68, < 6.1.134 | ≥ 6.6.7, < 6.6.87 | ≥ 6.7, < 6.12.23 | ≥ 6.13, < 6.13.11 | ≥ 6.14, < 6.14.2
Debian1 product
  • linux< 6.1.135-1 | < 6.12.25-1

3 vendors · 136 products

References

53 links
Show all 53 references