Not yet scoredPublished Dec 30, 2025

CVE-2022-50866ASoC: pxa: fix null-pointer dereference in filter()

Updated under an hour ago (Oct 26, 2026, 2:23 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ASoC: pxa: fix null-pointer dereference in filter() kasprintf() would return NULL pointer when kmalloc() fail to allocate. Need to check the return pointer before calling strcmp().

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	7a824e214e25a49442fe868dac0af8a904b24f58 builds before 3ec75e0ea9550b8f2e531172f2e67ba9d5227ec3; 7a824e214e25a49442fe868dac0af8a904b24f58 builds before 5b510a82740d2a42a75b5661b402bcaf8ae22cd5; 7a824e214e25a49442fe868dac0af8a904b24f58 builds before 0abd1d78317a3a2dfe00b203fbf14ee7df537e0a; from 7a824e214e25a49442fe868dac0af8a904b24f58 before a8baccb79de2f48a2083d51febf627eb50ce1898; from 7a824e214e25a49442fe868dac0af8a904b24f58 before 21a1409e8cf73053b54f7860548e3043dfa351a9; from 7a824e214e25a49442fe868dac0af8a904b24f58 before 83baa509396a742e0ce145b09fde1ce0a948f49a; from 7a824e214e25a49442fe868dac0af8a904b24f58 before 9fb9b3b67a5b8669296d6372cd901ef86557e6f6; from 7a824e214e25a49442fe868dac0af8a904b24f58 before 21b92cf41952577a95bfa430e39478cbd66e42a7; and 1 more ranges	CNA record

References

References

https://git.kernel.org/stable/c/3ec75e0ea9550b8f2e531172f2e67ba9d5227ec3
https://git.kernel.org/stable/c/5b510a82740d2a42a75b5661b402bcaf8ae22cd5
https://git.kernel.org/stable/c/0abd1d78317a3a2dfe00b203fbf14ee7df537e0a
https://git.kernel.org/stable/c/a8baccb79de2f48a2083d51febf627eb50ce1898
https://git.kernel.org/stable/c/21a1409e8cf73053b54f7860548e3043dfa351a9
https://git.kernel.org/stable/c/83baa509396a742e0ce145b09fde1ce0a948f49a
https://git.kernel.org/stable/c/9fb9b3b67a5b8669296d6372cd901ef86557e6f6
https://git.kernel.org/stable/c/21b92cf41952577a95bfa430e39478cbd66e42a7
https://git.kernel.org/stable/c/ec7bf231aaa1bdbcb69d23bc50c753c80fb22429

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.