CVE-2025-22066 is a medium severity vulnerability in the Linux kernel's ASoC imx-card driver. The flaw occurs because the function imx_card_probe() does not check if devm_kasprintf() returns NULL on memory allocation failure, leading to a NULL pointer dereference and potential denial of service. This issue has been resolved by adding a NULL check after devm_kasprintf().