CVE-2025-38198

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A vulnerability in the Linux kernel has been resolved, related to the fbcon module. The issue occurs when attempting to write to the "store modes" sysfs node, which can cause an array-index-out-of-bounds error in the fbcon info from console function. This happens when the con2fb map array contains a -1 value, indicating an unregistered console. The error handling has been improved to return NULL in such cases, allowing callers to correctly compare against existing "info" pointers.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.