CVE-2025-38215: fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var
Published Jul 4, 2025
·Updated
fbdev: Fix doregisterframebuffer to prevent null-ptr-deref in fbvideomodetovar
Affected Software
14 affected componentsFixes available
Linux Foundation Linux Kernel>=5.10.226
Linux Linux kernel>=2.6.13<6.1.143
Linux Linux kernel>=6.2<6.6.95
Linux Linux kernel>=6.7<6.12.35
Linux Linux kernel>=6.13<6.15.4
Linux Linux kernel=2.6.12
Linux Linux kernel=2.6.12-rc2
Linux Linux kernel=2.6.12-rc3
Linux Linux kernel=2.6.12-rc4
Linux Linux kernel=2.6.12-rc5
Debian Debian Linux=11.0
Microsoft cbl2 kernel 5.15.186.1-1
Microsoft azl3 kernel 6.6.92.2-2
Microsoft azl3 kernel 6.6.96.1-1
Event History
Jul 4, 2025
CVE Published
via MITRE·01:37 PM
Data Sourced
via MITRE·01:37 PM
Description
Data Sourced
via NVD·02:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Aug 7, 2025
Data Sourced
via Microsoft·12:00 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·07:00 AM
DescriptionSeverity
Updated
via Microsoft·07:00 AM
SeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-38215?
The severity of CVE-2025-38215 has not been specified, but it involves a risk of null pointer dereference in the Linux kernel.
2
How do I fix CVE-2025-38215?
To fix CVE-2025-38215, users should update to a patched version of the Linux kernel that addresses the framebuffer issue.
3
What software is affected by CVE-2025-38215?
CVE-2025-38215 affects the Linux kernel starting from version 5.10.226.
4
What type of vulnerability is CVE-2025-38215?
CVE-2025-38215 is categorized as a null pointer dereference vulnerability in the framebuffer device driver.
5
What happens if CVE-2025-38215 is exploited?
Exploitation of CVE-2025-38215 may lead to application crashes or system instability when memory allocation fails.