{"id":"CVE-2025-22016","title":"dpll: fix xa_alloc_cyclic() error handling","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndpll: fix xa_alloc_cyclic() error handling\n\nIn case of returning 1 from xa_alloc_cyclic() (wrapping) ERR_PTR(1) will\nbe returned, which will cause IS_ERR() to be false.…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 97f265ef7f5b526b33d6030b2a1fc69a2259bf4a < cb2f8a5c1fd9e7a1fefa23afe20570e16da1ada4","Linux >= 97f265ef7f5b526b33d6030b2a1fc69a2259bf4a < 4d350043be684762e581d9bdd32d543621d01a9c","Linux >= 97f265ef7f5b526b33d6030b2a1fc69a2259bf4a < 3614bf90130d60f191a5fe218d04f6251c678e13","Linux 6.8"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T20:37:59.474497Z"},"published":"2025-04-08","updated":"2026-11-05","sourceUpdated":"2026-11-05T20:41:49.348Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-22016","references":[{"url":"https://git.kernel.org/stable/c/cb2f8a5c1fd9e7a1fefa23afe20570e16da1ada4"},{"url":"https://git.kernel.org/stable/c/4d350043be684762e581d9bdd32d543621d01a9c"},{"url":"https://git.kernel.org/stable/c/3614bf90130d60f191a5fe218d04f6251c678e13"}],"tags":["cve.org"],"epss":0.00199,"epssPercentile":0.09784,"ingestedAt":"2026-11-05T22:38:31.859Z","slug":"CVE-2025-22016","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndpll: fix xa_alloc_cyclic() error handling\n\nIn case of returning 1 from xa_alloc_cyclic() (wrapping) ERR_PTR(1) will\nbe returned, which will cause IS_ERR() to be false. Which can lead to\ndereference not allocated pointer (pin).\n\nFix it by checking if err is lower than zero.\n\nThis wasn't found in real usecase, only noticed. Credit to Pierre.\n\n## Affected\n\n- `Linux >= 97f265ef7f5b526b33d6030b2a1fc69a2259bf4a < cb2f8a5c1fd9e7a1fefa23afe20570e16da1ada4`\n- `Linux >= 97f265ef7f5b526b33d6030b2a1fc69a2259bf4a < 4d350043be684762e581d9bdd32d543621d01a9c`\n- `Linux >= 97f265ef7f5b526b33d6030b2a1fc69a2259bf4a < 3614bf90130d60f191a5fe218d04f6251c678e13`\n- `Linux 6.8`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}