CVE-2025-38630: vulnerability in Linux
fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
Published · Updated
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.2%
exploitation probability
0.2%top 93% of all CVEs
observed exploitation
nono source reports it
In the Linux kernel, the following vulnerability has been resolved:
fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
fb_add_videomode() can fail with -ENOMEM when its internal kmalloc() cannot
allocate a struct fb_modelist. If that happens, the modelist stays empty but
the driver continues to register. Add a check for its return value to prevent
poteintial null-ptr-deref, which is similar to the commit 17186f1f90d3 ("fbdev:
Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var").
Affected products
Linux · LinuxRelated CVEs — Linux
In the same product, most dangerous first.
CVE-2024-53197HIGHALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devicesEPSS 4.1%KEVCVE-2026-31431HIGHcrypto: algif_aead - Revert to operating out-of-placeEPSS 3.4%KEVCVE-2024-53104HIGHmedia: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_formatEPSS 3.4%KEVCVE-2025-39682CRITICALtls: fix handling of zero-length records on the rx_listEPSS 2.9%KEVCVE-2024-36971HIGHnet: fix __dst_negative_advice() raceEPSS 2.7%KEVCVE-2025-39964HIGHcrypto: af_alg - Disallow concurrent writes in af_alg_sendmsgEPSS 1.4%KEV
References
https://git.kernel.org/stable/c/40f0a51f6c54d46a94b9f1180339ede7ca7ee190https://git.kernel.org/stable/c/49377bac9e3bec1635065a033c9679214fe7593ehttps://git.kernel.org/stable/c/4b5d36cc3014986e6fac12eaa8433fe56801d4cehttps://git.kernel.org/stable/c/69373502c2b5d364842c702c941d1171e4f35a7chttps://git.kernel.org/stable/c/ac16154cccda8be10ee3ae188f10a06f3890bc5dhttps://git.kernel.org/stable/c/cca8f5a3991916729b39d797d01499c335137319https://git.kernel.org/stable/c/da11e6a30e0bb8e911288bdc443b3dc8f6a7cac7https://git.kernel.org/stable/c/f00c29e6755ead56baf2a9c1d3c4c0bb40af3612https://git.kernel.org/stable/c/f060441c153495750804133555cf0a211a856892https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html