CVE-2025-38612

staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()

State: Published
Severity: Not scored
Published: Aug 19, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()

In the error paths after fb_info structure is successfully allocated, the memory allocated in fb_deferred_io_init() for info->pagerefs is not freed. Fix that by adding the cleanup function on the error path.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	c296d5f9957c03994a699d6739c27d4581a9f6c7 to before 83ea0c7b8d12c67f6c4703d6c458627a7fc45fc0Affected c296d5f9957c03994a699d6739c27d4581a9f6c7 to before c3b1c45c48117ed4d8797ee89d1155f16b72d490Affected c296d5f9957c03994a699d6739c27d4581a9f6c7 to before 3290f62f23fae05f2ec34085eb86dfb3648ef91fAffected c296d5f9957c03994a699d6739c27d4581a9f6c7 to before 6f9e2cf9e9c1a891a683329af35bb33ed9d38b5fAffected c296d5f9957c03994a699d6739c27d4581a9f6c7 to before b31cf6f7716a5d3e4461763f32d812acdaec6e74Affected c296d5f9957c03994a699d6739c27d4581a9f6c7 to before a3177955f8da3c826a18b75e54881e2e9a9c96f1Affected c296d5f9957c03994a699d6739c27d4581a9f6c7 to before 6771f121ae87490ddc19eabb7450383af9e01b6dAffected c296d5f9957c03994a699d6739c27d4581a9f6c7 to before 47b3d6e8921bbb7b65c2dab8eaa8864901848c1cAffected c296d5f9957c03994a699d6739c27d4581a9f6c7 to before eb2cb7dab60f9be0b435ac4a674255429a36d72cAffected
LinuxLinux	4.0Affected before 4.0Not affected 5.4.297 through 5.4.Not affected 5.10.241 through 5.10.Not affected 5.15.190 through 5.15.Not affected 6.1.148 through 6.1.Not affected 6.6.102 through 6.6.Not affected 6.12.42 through 6.12.Not affected 6.15.10 through 6.15.Not affected 6.16.1 through 6.16.Not affected 6.17 and laterNot affected

Product

Versions

LinuxLinux

c296d5f9957c03994a699d6739c27d4581a9f6c7 to before 83ea0c7b8d12c67f6c4703d6c458627a7fc45fc0Affected
c296d5f9957c03994a699d6739c27d4581a9f6c7 to before c3b1c45c48117ed4d8797ee89d1155f16b72d490Affected
c296d5f9957c03994a699d6739c27d4581a9f6c7 to before 3290f62f23fae05f2ec34085eb86dfb3648ef91fAffected
c296d5f9957c03994a699d6739c27d4581a9f6c7 to before 6f9e2cf9e9c1a891a683329af35bb33ed9d38b5fAffected
c296d5f9957c03994a699d6739c27d4581a9f6c7 to before b31cf6f7716a5d3e4461763f32d812acdaec6e74Affected
c296d5f9957c03994a699d6739c27d4581a9f6c7 to before a3177955f8da3c826a18b75e54881e2e9a9c96f1Affected
c296d5f9957c03994a699d6739c27d4581a9f6c7 to before 6771f121ae87490ddc19eabb7450383af9e01b6dAffected
c296d5f9957c03994a699d6739c27d4581a9f6c7 to before 47b3d6e8921bbb7b65c2dab8eaa8864901848c1cAffected
c296d5f9957c03994a699d6739c27d4581a9f6c7 to before eb2cb7dab60f9be0b435ac4a674255429a36d72cAffected

LinuxLinux

4.0Affected
before 4.0Not affected
5.4.297 through 5.4.*Not affected
5.10.241 through 5.10.*Not affected
5.15.190 through 5.15.*Not affected
6.1.148 through 6.1.*Not affected
6.6.102 through 6.6.*Not affected
6.12.42 through 6.12.*Not affected
6.15.10 through 6.15.*Not affected
6.16.1 through 6.16.*Not affected
6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.