CVE-2025-38702

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A buffer overflow issue exists in the do register framebuffer() function within the fbdev component of the Linux kernel. The vulnerability occurs due to potential NULL gaps in the registered fb[] array during unregistration, the possibility of all array slots becoming occupied despite num registered fb being less than FB MAX, and a registration loop exceeding array bounds. This can lead to out-of-bounds access when attempting to access registered fb[FB MAX].

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.