CVE-2025-38630

fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref

State: Published
Severity: Not scored
Published: Aug 22, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref

fb_add_videomode() can fail with -ENOMEM when its internal kmalloc() cannot allocate a struct fb_modelist. If that happens, the modelist stays empty but the driver continues to register. Add a check for its return value to prevent poteintial null-ptr-deref, which is similar to the commit 17186f1f90d3 ("fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var").

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1b6c79361ba5ce30b40f0f7d6fc2421dc5fcbe0c to before 69373502c2b5d364842c702c941d1171e4f35a7cAffected 1b6c79361ba5ce30b40f0f7d6fc2421dc5fcbe0c to before f00c29e6755ead56baf2a9c1d3c4c0bb40af3612Affected 1b6c79361ba5ce30b40f0f7d6fc2421dc5fcbe0c to before cca8f5a3991916729b39d797d01499c335137319Affected 1b6c79361ba5ce30b40f0f7d6fc2421dc5fcbe0c to before ac16154cccda8be10ee3ae188f10a06f3890bc5dAffected 1b6c79361ba5ce30b40f0f7d6fc2421dc5fcbe0c to before 4b5d36cc3014986e6fac12eaa8433fe56801d4ceAffected 1b6c79361ba5ce30b40f0f7d6fc2421dc5fcbe0c to before 40f0a51f6c54d46a94b9f1180339ede7ca7ee190Affected 1b6c79361ba5ce30b40f0f7d6fc2421dc5fcbe0c to before 49377bac9e3bec1635065a033c9679214fe7593eAffected 1b6c79361ba5ce30b40f0f7d6fc2421dc5fcbe0c to before f060441c153495750804133555cf0a211a856892Affected 1b6c79361ba5ce30b40f0f7d6fc2421dc5fcbe0c to before da11e6a30e0bb8e911288bdc443b3dc8f6a7cac7Affected
LinuxLinux	3.11Affected before 3.11Not affected 5.4.297 through 5.4.Not affected 5.10.241 through 5.10.Not affected 5.15.190 through 5.15.Not affected 6.1.148 through 6.1.Not affected 6.6.102 through 6.6.Not affected 6.12.42 through 6.12.Not affected 6.15.10 through 6.15.Not affected 6.16.1 through 6.16.Not affected 6.17 and laterNot affected

Product

Versions

LinuxLinux

1b6c79361ba5ce30b40f0f7d6fc2421dc5fcbe0c to before 69373502c2b5d364842c702c941d1171e4f35a7cAffected
1b6c79361ba5ce30b40f0f7d6fc2421dc5fcbe0c to before f00c29e6755ead56baf2a9c1d3c4c0bb40af3612Affected
1b6c79361ba5ce30b40f0f7d6fc2421dc5fcbe0c to before cca8f5a3991916729b39d797d01499c335137319Affected
1b6c79361ba5ce30b40f0f7d6fc2421dc5fcbe0c to before ac16154cccda8be10ee3ae188f10a06f3890bc5dAffected
1b6c79361ba5ce30b40f0f7d6fc2421dc5fcbe0c to before 4b5d36cc3014986e6fac12eaa8433fe56801d4ceAffected
1b6c79361ba5ce30b40f0f7d6fc2421dc5fcbe0c to before 40f0a51f6c54d46a94b9f1180339ede7ca7ee190Affected
1b6c79361ba5ce30b40f0f7d6fc2421dc5fcbe0c to before 49377bac9e3bec1635065a033c9679214fe7593eAffected
1b6c79361ba5ce30b40f0f7d6fc2421dc5fcbe0c to before f060441c153495750804133555cf0a211a856892Affected
1b6c79361ba5ce30b40f0f7d6fc2421dc5fcbe0c to before da11e6a30e0bb8e911288bdc443b3dc8f6a7cac7Affected

LinuxLinux

3.11Affected
before 3.11Not affected
5.4.297 through 5.4.*Not affected
5.10.241 through 5.10.*Not affected
5.15.190 through 5.15.*Not affected
6.1.148 through 6.1.*Not affected
6.6.102 through 6.6.*Not affected
6.12.42 through 6.12.*Not affected
6.15.10 through 6.15.*Not affected
6.16.1 through 6.16.*Not affected
6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.