{"uuid": "e5ca7719-a543-42d7-b75c-a1d02d2da350", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-22016", "type": "seen", "source": "https://t.me/cvedetector/22447", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-22016 - Linux Kernel dpll XA Allocation Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-22016 \nPublished : April 8, 2025, 9:15 a.m. | 2\u00a0hours, 10\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndpll: fix xa_alloc_cyclic() error handling  \n  \nIn case of returning 1 from xa_alloc_cyclic() (wrapping) ERR_PTR(1) will  \nbe returned, which will cause IS_ERR() to be false. Which can lead to  \ndereference not allocated pointer (pin).  \n  \nFix it by checking if err is lower than zero.  \n  \nThis wasn't found in real usecase, only noticed. Credit to Pierre. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T13:59:57.000000Z"}