---
id: CVE-2025-22016
title: 'dpll: fix xa_alloc_cyclic() error handling'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  dpll: fix xa_alloc_cyclic() error handling

  In case of returning 1 from xa_alloc_cyclic() (wrapping) ERR_PTR(1) will
  be returned, which will cause IS_ERR() to be false.…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 97f265ef7f5b526b33d6030b2a1fc69a2259bf4a <
    cb2f8a5c1fd9e7a1fefa23afe20570e16da1ada4
  - >-
    Linux >= 97f265ef7f5b526b33d6030b2a1fc69a2259bf4a <
    4d350043be684762e581d9bdd32d543621d01a9c
  - >-
    Linux >= 97f265ef7f5b526b33d6030b2a1fc69a2259bf4a <
    3614bf90130d60f191a5fe218d04f6251c678e13
  - Linux 6.8
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:37:59.474497Z'
published: '2025-04-08'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:41:49.348Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-22016'
references:
  - url: 'https://git.kernel.org/stable/c/cb2f8a5c1fd9e7a1fefa23afe20570e16da1ada4'
  - url: 'https://git.kernel.org/stable/c/4d350043be684762e581d9bdd32d543621d01a9c'
  - url: 'https://git.kernel.org/stable/c/3614bf90130d60f191a5fe218d04f6251c678e13'
tags:
  - cve.org
epss: 0.00199
epssPercentile: 0.09784
ingestedAt: '2026-11-05T22:38:31.859Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

dpll: fix xa_alloc_cyclic() error handling

In case of returning 1 from xa_alloc_cyclic() (wrapping) ERR_PTR(1) will
be returned, which will cause IS_ERR() to be false. Which can lead to
dereference not allocated pointer (pin).

Fix it by checking if err is lower than zero.

This wasn't found in real usecase, only noticed. Credit to Pierre.

## Affected

- `Linux >= 97f265ef7f5b526b33d6030b2a1fc69a2259bf4a < cb2f8a5c1fd9e7a1fefa23afe20570e16da1ada4`
- `Linux >= 97f265ef7f5b526b33d6030b2a1fc69a2259bf4a < 4d350043be684762e581d9bdd32d543621d01a9c`
- `Linux >= 97f265ef7f5b526b33d6030b2a1fc69a2259bf4a < 3614bf90130d60f191a5fe218d04f6251c678e13`
- `Linux 6.8`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.