CVE-2025-38702
BaseFortify
Publication date: 2025-09-04
Last updated on: 2025-11-03
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | 6.1.153 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a potential buffer overflow in the Linux kernel's framebuffer registration function (do_register_framebuffer). It occurs when unregistration creates NULL gaps in the framebuffer array, all array slots become occupied even though the count is less than the maximum, and the registration loop exceeds the array bounds, leading to out-of-bounds access. The fix adds a boundary check to prevent accessing beyond the maximum allowed framebuffer entries.
How can this vulnerability impact me? :
The buffer overflow could lead to memory corruption in the Linux kernel, potentially causing system instability, crashes, or allowing an attacker to execute arbitrary code with kernel privileges.