CVE-2025-38612
BaseFortify
Publication date: 2025-08-19
Last updated on: 2025-11-03
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | 6.1.153-1 |
| linux | linux_kernel | 5.10.244-1 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a potential memory leak in the Linux kernel's fbtft framebuffer driver. Specifically, when an error occurs after the fb_info structure is allocated, the memory allocated for info->pagerefs in fb_deferred_io_init() is not freed properly. The fix involves adding a cleanup function to free this memory on the error path.
How can this vulnerability impact me? :
The impact of this vulnerability is a potential memory leak in the Linux kernel, which could lead to increased memory usage and possibly system instability or crashes if the leak occurs repeatedly or in critical systems.