CVE-2025-38685: fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
fbdev: Fix vmalloc out-of-bounds write in fastimageblit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38685?
CVE-2025-38685 is considered a high-severity vulnerability due to the potential for an out-of-bounds write affecting system stability.
How do I fix CVE-2025-38685?
To fix CVE-2025-38685, update the Linux kernel to a version that includes the patch for this vulnerability.
What impact does CVE-2025-38685 have on affected systems?
CVE-2025-38685 could allow a userspace program to exploit the kernel and potentially execute arbitrary code or crash the system.
Which versions of the Linux kernel are affected by CVE-2025-38685?
CVE-2025-38685 affects various versions of the Linux kernel prior to the patch being applied.
Is CVE-2025-38685 exploitative in nature?
Yes, CVE-2025-38685 can be exploited by an attacker with local access to the system, potentially leading to privilege escalation.