logo_clicknbuy.png

CVE-2025-22016 – Linux Kernel dpll XA Allocation Pointer Dereference Vulnerability

The following table lists the changes that have been made to the
CVE-2025-22016 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Apr. 08, 2025

    Action Type Old Value New Value
    Added Description In the Linux kernel, the following vulnerability has been resolved:

    dpll: fix xa_alloc_cyclic() error handling

    In case of returning 1 from xa_alloc_cyclic() (wrapping) ERR_PTR(1) will
    be returned, which will cause IS_ERR() to be false. Which can lead to
    dereference not allocated pointer (pin).

    Fix it by checking if err is lower than zero.

    This wasn’t found in real usecase, only noticed. Credit to Pierre.
    Added Reference https://git.kernel.org/stable/c/3614bf90130d60f191a5fe218d04f6251c678e13
    Added Reference https://git.kernel.org/stable/c/4d350043be684762e581d9bdd32d543621d01a9c
    Added Reference https://git.kernel.org/stable/c/cb2f8a5c1fd9e7a1fefa23afe20570e16da1ada4
Share the Post:

Related Posts