CVE-2025-40037

CVE-2025-40037 is a Linux kernel use-after-free in the fbdev/simplefb path. The issue arises during device removal when pm_domain cleanup uses a struct simplefb_par allocated inside struct fb_info by framebuffer_alloc(); it was previously freed by unregister_framebuffer(), but devres cleanup runs...

Linux Distros Unpatched Vulnerability : CVE-2025-40037

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbdev: simplefb: Fix use after free in simplefbdetachgenpds The pmdomain cleanup can not be devres managed as it uses struct simplefbpar which is allocated with...