Description

In the Linux kernel, the following vulnerability has been resolved: fbdev: fix potential buffer overflow in do_register_framebuffer() The current implementation may lead to buffer overflow when: 1. Unregistration creates NULL gaps in registered_fb[] 2. All array slots become occupied despite num_registered_fb < FB_MAX 3. The registration loop exceeds array bounds Add boundary check to prevent registered_fb[FB_MAX] access.

INFO

Published Date :

2025-09-04T15:32:53.990Z

Last Modified :

2026-01-02T15:31:24.690Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2025-38702 vulnerability.

Vendors Products
Debian
  • Debian Linux
Linux
  • Linux Kernel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-38702.

URL Resource
https://git.kernel.org/stable/c/248b2aab9b2af5ecf89d9d7955a2ff20c4b4a399 cve-icon cve-icon
https://git.kernel.org/stable/c/2828a433c7d7a05b6f27c8148502095101dd0b09 cve-icon cve-icon
https://git.kernel.org/stable/c/523b84dc7ccea9c4d79126d6ed1cf9033cf83b05 cve-icon cve-icon
https://git.kernel.org/stable/c/5c3f5a25c62230b7965804ce7a2e9305c3ca3961 cve-icon cve-icon
https://git.kernel.org/stable/c/806f85bdd3a60187c21437fc51baace11f659f35 cve-icon cve-icon
https://git.kernel.org/stable/c/cbe740de32bb0fb7a5213731ff5f26ea6718fca3 cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html cve-icon
https://lore.kernel.org/linux-cve-announce/2025090453-CVE-2025-38702-0b09@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-38702 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-38702 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact