NetSight
IP …
high7.8

CVE-2025-38702

In the Linux kernel, the following vulnerability has been resolved: fbdev: fix potential buffer overflow in do_register_framebuffer() The current implementatio…

Impact

In the Linux kernel, the following vulnerability has been resolved: fbdev: fix potential buffer overflow in do_register_framebuffer() The current implementation may lead to buffer overflow when: 1. Unregistration creates NULL gaps in registered_fb[] 2. All array slots become occupied despite num_registered_fb < FB_MAX 3. The registration loop exceeds array bounds Add boundary check to prevent registered_fb[FB_MAX] access.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.12.1 before 6.1.149
from 6.2 before 6.6.103
from 6.7 before 6.12.43
from 6.13 before 6.15.11
from 6.16 before 6.16.2
Version 2.6.12
DebianDebian Linux
Version 11.0

Weakness classification

CWE-787

References