In the Linux kernel, the following vulnerability has been resolved:
fbdev: fix potential buffer overflow in do_register_framebuffer()
The current implementation may lead to buffer overflow when:
1. Unregistration creates NULL gaps in registered_fb[]
2. All array slots become occupied despite num_registered_fb < FB_MAX
3. The registration loop exceeds array bounds
Add boundary check to prevent registered_fb[FB_MAX] access.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
23 Jan 2026, 20:31
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-787 | |
| References | () https://git.kernel.org/stable/c/248b2aab9b2af5ecf89d9d7955a2ff20c4b4a399 - Patch | |
| References | () https://git.kernel.org/stable/c/2828a433c7d7a05b6f27c8148502095101dd0b09 - Patch | |
| References | () https://git.kernel.org/stable/c/523b84dc7ccea9c4d79126d6ed1cf9033cf83b05 - Patch | |
| References | () https://git.kernel.org/stable/c/5c3f5a25c62230b7965804ce7a2e9305c3ca3961 - Patch | |
| References | () https://git.kernel.org/stable/c/806f85bdd3a60187c21437fc51baace11f659f35 - Patch | |
| References | () https://git.kernel.org/stable/c/cbe740de32bb0fb7a5213731ff5f26ea6718fca3 - Patch | |
| References | () https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html - Third Party Advisory | |
| First Time |
Linux
Debian Debian debian Linux Linux linux Kernel |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| CPE | cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.12:-:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:* |
03 Nov 2025, 18:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
04 Sep 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-09-04 16:15
Updated : 2026-01-23 20:31
NVD link : CVE-2025-38702
Mitre link : CVE-2025-38702
CVE.ORG link : CVE-2025-38702
JSON object : View
Products Affected
debian
- debian_linux
linux
- linux_kernel
CWE
CWE-787
Out-of-bounds Write