Security tracker / CVE-2025-38215

CVE-2025-38215

fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in 1da177e4c3f4 ("Linux-2.6.12-rc2"). Vulnerable versions: 2.6.12.

Bugs

Status

Branch	Status
upstream	released (6.16-rc1) [17186f1f90d34fa701e4f14e6818305151637b9e]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.15-upstream-stable	released (6.15.4) [d803c4c2a4ac8ce2be6d899d5c7ab0bf7ec355e9]
6.12-upstream-stable	released (6.12.35) [3f2098f4fba7718eb2501207ca6e99d22427f25a]
6.6-upstream-stable	released (6.6.95) [0909b2b49c4546a7a08c80f53d93736b63270827]
6.1-upstream-stable	released (6.1.143) [908c5bb64f9c4319902b8ca1aa3fef8f83302520]
5.10-upstream-stable	needed
sid	released (6.12.35-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	released (6.1.147-1)
5.10-bullseye-security	needed