In the Linux kernel, the following vulnerability has been resolved:
fbdev: imxfb: Check fbaddvideomode to prevent null-ptr-deref
fbaddvideomode() can fail with -ENOMEM when its internal kmalloc() cannot allocate a struct fbmodelist. If that happens, the modelist stays empty but the driver continues to register. Add a check for its return value to prevent poteintial null-ptr-deref, which is similar to the commit 17186f1f90d3 ("fbdev: Fix doregisterframebuffer to prevent null-ptr-deref in fbvideomodetovar").
[
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f060441c153495750804133555cf0a211a856892",
"id": "CVE-2025-38630-09a6231a",
"digest": {
"function_hash": "34982102196966792299822964452058379177",
"length": 3292.0
},
"target": {
"function": "imxfb_probe",
"file": "drivers/video/fbdev/imxfb.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da11e6a30e0bb8e911288bdc443b3dc8f6a7cac7",
"id": "CVE-2025-38630-213cbde6",
"digest": {
"function_hash": "34982102196966792299822964452058379177",
"length": 3292.0
},
"target": {
"function": "imxfb_probe",
"file": "drivers/video/fbdev/imxfb.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f00c29e6755ead56baf2a9c1d3c4c0bb40af3612",
"id": "CVE-2025-38630-3273da4e",
"digest": {
"function_hash": "315035756045744931473513657991446718058",
"length": 4185.0
},
"target": {
"function": "imxfb_probe",
"file": "drivers/video/fbdev/imxfb.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da11e6a30e0bb8e911288bdc443b3dc8f6a7cac7",
"id": "CVE-2025-38630-5e60cf4a",
"digest": {
"threshold": 0.9,
"line_hashes": [
"207816948782569127128807096294703828321",
"330619947763534114922247579144395829844",
"296865308027105753542900973154778924168",
"14943751879001406805190066587242376250",
"316419842398836464534849980461228550791"
]
},
"target": {
"file": "drivers/video/fbdev/imxfb.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b5d36cc3014986e6fac12eaa8433fe56801d4ce",
"id": "CVE-2025-38630-69bd7df5",
"digest": {
"function_hash": "157328657107595678607282379755944022171",
"length": 3334.0
},
"target": {
"function": "imxfb_probe",
"file": "drivers/video/fbdev/imxfb.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@49377bac9e3bec1635065a033c9679214fe7593e",
"id": "CVE-2025-38630-7aa56751",
"digest": {
"function_hash": "34982102196966792299822964452058379177",
"length": 3292.0
},
"target": {
"function": "imxfb_probe",
"file": "drivers/video/fbdev/imxfb.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cca8f5a3991916729b39d797d01499c335137319",
"id": "CVE-2025-38630-7fa8f486",
"digest": {
"threshold": 0.9,
"line_hashes": [
"132803147352867694269710185673431641490",
"124933999559856752501504929245558025423",
"296865308027105753542900973154778924168",
"14943751879001406805190066587242376250",
"316419842398836464534849980461228550791"
]
},
"target": {
"file": "drivers/video/fbdev/imxfb.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@49377bac9e3bec1635065a033c9679214fe7593e",
"id": "CVE-2025-38630-887025a5",
"digest": {
"threshold": 0.9,
"line_hashes": [
"207816948782569127128807096294703828321",
"330619947763534114922247579144395829844",
"296865308027105753542900973154778924168",
"14943751879001406805190066587242376250",
"316419842398836464534849980461228550791"
]
},
"target": {
"file": "drivers/video/fbdev/imxfb.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f060441c153495750804133555cf0a211a856892",
"id": "CVE-2025-38630-91af1e52",
"digest": {
"threshold": 0.9,
"line_hashes": [
"207816948782569127128807096294703828321",
"330619947763534114922247579144395829844",
"296865308027105753542900973154778924168",
"14943751879001406805190066587242376250",
"316419842398836464534849980461228550791"
]
},
"target": {
"file": "drivers/video/fbdev/imxfb.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b5d36cc3014986e6fac12eaa8433fe56801d4ce",
"id": "CVE-2025-38630-91db3ce2",
"digest": {
"threshold": 0.9,
"line_hashes": [
"207816948782569127128807096294703828321",
"330619947763534114922247579144395829844",
"296865308027105753542900973154778924168",
"14943751879001406805190066587242376250",
"316419842398836464534849980461228550791"
]
},
"target": {
"file": "drivers/video/fbdev/imxfb.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f00c29e6755ead56baf2a9c1d3c4c0bb40af3612",
"id": "CVE-2025-38630-9deddb08",
"digest": {
"threshold": 0.9,
"line_hashes": [
"132803147352867694269710185673431641490",
"124933999559856752501504929245558025423",
"296865308027105753542900973154778924168",
"14943751879001406805190066587242376250",
"316419842398836464534849980461228550791"
]
},
"target": {
"file": "drivers/video/fbdev/imxfb.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac16154cccda8be10ee3ae188f10a06f3890bc5d",
"id": "CVE-2025-38630-c3b1e593",
"digest": {
"function_hash": "83737459234232620741001010055754358557",
"length": 3571.0
},
"target": {
"function": "imxfb_probe",
"file": "drivers/video/fbdev/imxfb.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac16154cccda8be10ee3ae188f10a06f3890bc5d",
"id": "CVE-2025-38630-cbe185c3",
"digest": {
"threshold": 0.9,
"line_hashes": [
"207816948782569127128807096294703828321",
"330619947763534114922247579144395829844",
"296865308027105753542900973154778924168",
"14943751879001406805190066587242376250",
"316419842398836464534849980461228550791"
]
},
"target": {
"file": "drivers/video/fbdev/imxfb.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@40f0a51f6c54d46a94b9f1180339ede7ca7ee190",
"id": "CVE-2025-38630-cc0cd564",
"digest": {
"threshold": 0.9,
"line_hashes": [
"207816948782569127128807096294703828321",
"330619947763534114922247579144395829844",
"296865308027105753542900973154778924168",
"14943751879001406805190066587242376250",
"316419842398836464534849980461228550791"
]
},
"target": {
"file": "drivers/video/fbdev/imxfb.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@40f0a51f6c54d46a94b9f1180339ede7ca7ee190",
"id": "CVE-2025-38630-d6476fcb",
"digest": {
"function_hash": "91413435470117290578004459244200627437",
"length": 3311.0
},
"target": {
"function": "imxfb_probe",
"file": "drivers/video/fbdev/imxfb.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cca8f5a3991916729b39d797d01499c335137319",
"id": "CVE-2025-38630-eaa164c8",
"digest": {
"function_hash": "315035756045744931473513657991446718058",
"length": 4185.0
},
"target": {
"function": "imxfb_probe",
"file": "drivers/video/fbdev/imxfb.c"
}
}
]