AZL-66605
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-66605.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-66605
- Upstream
- Published
- 2025-08-22T16:15:36Z
- Modified
- 2026-04-01T05:21:00.699842Z
- Summary
- CVE-2025-38630 affecting package kernel for versions less than 6.6.104.2-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
fbdev: imxfb: Check fbaddvideomode to prevent null-ptr-deref
fbaddvideomode() can fail with -ENOMEM when its internal kmalloc() cannot allocate a struct fbmodelist. If that happens, the modelist stays empty but the driver continues to register. Add a check for its return value to prevent poteintial null-ptr-deref, which is similar to the commit 17186f1f90d3 ("fbdev: Fix doregisterframebuffer to prevent null-ptr-deref in fbvideomodetovar").
- References