CVE-2025-38630

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-38630
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38630.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-38630
Downstream
Related
Published
2025-08-22T16:15:36Z
Modified
2025-09-06T13:01:27Z
Summary
[none]
Details

In the Linux kernel, the following vulnerability has been resolved:

fbdev: imxfb: Check fbaddvideomode to prevent null-ptr-deref

fbaddvideomode() can fail with -ENOMEM when its internal kmalloc() cannot allocate a struct fbmodelist. If that happens, the modelist stays empty but the driver continues to register. Add a check for its return value to prevent poteintial null-ptr-deref, which is similar to the commit 17186f1f90d3 ("fbdev: Fix doregisterframebuffer to prevent null-ptr-deref in fbvideomodetovar").

References

Affected packages