LiveActive security incident?Get immediate response
CVE Record

CVE-2025-22099: drm: xlnx: zynqmp_dpsub: Add NULL check in zynqmp_audio_init

In the Linux kernel, the following vulnerability has been resolved: drm: xlnx: zynqmp_dpsub: Add NULL check in zynqmp_audio_init devm_kasprintf() calls can return null pointers on failure. But some return values were not checked in zynqmp_audio_init(). Add NULL check in zynqmp_audio_init(), avoid referencing null pointers in the subsequent code.

UnknownCVSS not scoredNot KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysismoderate

Security readout for executives and security teams

Plain-English summary

CVE-2025-22099 is a Linux kernel defect in the Xilinx ZynqMP DisplayPort subsystem audio initialization code. If an internal memory-allocation helper returns NULL, later code could dereference it. The public record does not provide a CVSS score, impact rating, or evidence of exploitation.

Executive priority

Treat as a targeted kernel reliability risk for specific embedded or ZynqMP Linux environments. It is not currently supported by public evidence of exploitation. Patch during normal kernel maintenance, faster where affected hardware is production-critical.

Technical view

The issue is in drm/xlnx/zynqmp_dpsub zynqmp_audio_init(). devm_kasprintf() return values were not fully checked. The kernel fix adds NULL checks to avoid subsequent NULL pointer dereference. Public references are Linux stable commits; the source bundle lists Linux 6.14-series affected information.

Likely exposure

Likely limited to Linux systems running affected kernels with the Xilinx ZynqMP DisplayPort subsystem driver path in use. This is not presented as broadly affecting all Linux deployments. Exposure should be confirmed against kernel version, platform hardware, and distribution backports.

Exploitation context

No cited source reports active exploitation, and the CVE is not in KEV. The sources do not describe a remote attack path or attacker-controlled trigger. Based on the description, the failure condition is an unchecked allocation failure during audio initialization.

Researcher notes

Public data is sparse: no CVSS, CWE, exploitability analysis, or distribution matrix is provided. Analysis should focus on the referenced commits and downstream backports. Avoid assuming reachability beyond systems using this driver path.

Mitigation direction

  • Check Linux vendor or distribution advisories for CVE-2025-22099 updates.
  • Update to a kernel build containing the referenced stable fix commits.
  • Prioritize ZynqMP-based systems using the affected display/audio driver.
  • If updates are unavailable, seek vendor guidance for supported workarounds.

Validation and detection

  • Inventory Linux kernel versions on ZynqMP or Xilinx display platforms.
  • Check whether the zynqmp_dpsub driver is present and used.
  • Verify vendor kernel changelogs reference CVE-2025-22099 or the stable commits.
  • Confirm patched systems run an updated kernel after reboot.
Prepared
Confidence
medium
Sources
4

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2025-22099 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
3Timeline events
0ADP providers
3Source links

Vulnerability timeline

Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.

  1. CVE reservedCVE Program

    The CVE ID was reserved by the assigning CNA.

  2. CVE publishedCVE Program

    The CVE record was published.

  3. CVE updatedCVE Program

    The CVE record metadata indicates this as the latest update time.

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
LinuxLinux3ec5c15793051c9fe102ed0674c7925a56205385, 3ec5c15793051c9fe102ed0674c7925a56205385unaffected
LinuxLinux6.14, 0, 6.14.2, 6.15affected
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.