SB2025090511 - Buffer overflow in Linux kernel fbdev core driver
Published: September 5, 2025
Security Bulletin ID
SB2025090511
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Buffer overflow (CVE-ID: CVE-2025-38702)
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to memory corruption within the do_register_framebuffer() function in drivers/video/fbdev/core/fbmem.c. A local user can escalate privileges on the system.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/248b2aab9b2af5ecf89d9d7955a2ff20c4b4a399
- https://git.kernel.org/stable/c/2828a433c7d7a05b6f27c8148502095101dd0b09
- https://git.kernel.org/stable/c/523b84dc7ccea9c4d79126d6ed1cf9033cf83b05
- https://git.kernel.org/stable/c/5c3f5a25c62230b7965804ce7a2e9305c3ca3961
- https://git.kernel.org/stable/c/806f85bdd3a60187c21437fc51baace11f659f35
- https://git.kernel.org/stable/c/cbe740de32bb0fb7a5213731ff5f26ea6718fca3