arm64: Don't call NULL in do_compat_alignment_fixup()

{
  "id": "696d5f1de246b3f40ed01c489255e6bfa6c63fd8045b8247f50ea4e8d44da7af",
  "url": "https://osv.dev/vulnerability/CVE-2025-22033",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "arm64: Don't call NULL in do_compat_alignment_fixup()",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: arm64: Don't call NULL in do_compat_alignment_fixup() do_alignment_t32_to_handler() only fixes up alignment faults for specific instructions; it returns NULL otherwise (e.g. LDREX). When that's the case, signal to the caller that it needs to proceed with the regular alignment fault handling (i.e. SIGBUS). Without this patch, the kernel panics: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 Mem abort info: ESR = 0x0000000086000006 EC = 0x21: IABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x06: level 2 translation fault user pgtable: 4k pages, 48-bit VAs, pgdp=00000800164aa000 [0000000000000000] pgd=0800081fdbd22003, p4d=0800081fdbd22003, pud=08000815d51c6003, pmd=0000000000000000 Internal error: Oops: 0000000086000006 [#1] SMP Modules linked in: cfg80211 rfkill xt_nat xt_tcpudp xt_conntrack nft_chain_nat xt_MASQUERADE nf_nat nf_conntrack_netlink nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 xfrm_user xfrm_algo xt_addrtype nft_compat br_netfilter veth nvme_fa> libcrc32c crc32c_generic raid0 multipath linear dm_mod dax raid1 md_mod xhci_pci nvme xhci_hcd nvme_core t10_pi usbcore igb crc64_rocksoft crc64 crc_t10dif crct10dif_generic crct10dif_ce crct10dif_common usb_common i2c_algo_bit i2c> CPU: 2 PID: 3932954 Comm: WPEWebProcess Not tainted 6.1.0-31-arm64 #1 Debian 6.1.128-1 Hardware name: GIGABYTE MP32-AR1-00/MP32-AR1-00, BIOS F18v (SCP: 1.08.20211002",
    "evidence": "osv:CVE-2025-22033",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "6.1.134",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.6.87",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.12.23",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.13.11",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.14.2",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "medium",
    "structured": {
      "id": "CVE-2025-22033",
      "aliases": [
        "CVE-2025-22033"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "3fc24ef32d3b9368f4c103dcd21d6a3f959b4870"
                },
                {
                  "fixed": "cf187601053ecaf671ae645edb898901f81d03e9"
                },
                {
                  "fixed": "617a4b0084a547917669fef2b54253cc9c064990"
                },
                {
                  "fixed": "2df8ee605eb6806cd41c2095306db05206633a08"
                },
                {
                  "fixed": "fa2a9f625f185c6acb4ee5be8d71359a567afac9"
                },
                {
                  "fixed": "ecf798573bbe0805803f7764e12a34b4bcc65074"
                },
                {
                  "fixed": "c28f31deeacda307acfee2f18c0ad904e5123aac"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-22033.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.1.0"
                },
                {
                  "fixed": "6.1.134"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.2.0"
                },
                {
                  "fixed": "6.6.87"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.7.0"
                },
                {
                  "fixed": "6.12.23"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.13.0"
                },
                {
                  "fixed": "6.13.11"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.14.0"
                },
                {
                  "fixed": "6.14.2"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-22033.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:24.135462028Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/2df8ee605eb6806cd41c2095306db05206633a08",
        "https://git.kernel.org/stable/c/617a4b0084a547917669fef2b54253cc9c064990",
        "https://git.kernel.org/stable/c/c28f31deeacda307acfee2f18c0ad904e5123aac",
        "https://git.kernel.org/stable/c/cf187601053ecaf671ae645edb898901f81d03e9",
        "https://git.kernel.org/stable/c/ecf798573bbe0805803f7764e12a34b4bcc65074",
        "https://git.kernel.org/stable/c/fa2a9f625f185c6acb4ee5be8d71359a567afac9",
        "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/22xxx/CVE-2025-22033.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-22033",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/22xxx/CVE-2025-22033.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2025-22033",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 490369,
  "published_at": "2025-04-16T14:11:52.696+00:00"
}