ROS-20260821-73-0014

The vulnerability of the imxfbprobe function in the drivers/video/fbdev/imxfb.c driver for kernel-based graphics buffer devices in the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service...

CVE-2025-38630

In the Linux kernel, the following vulnerability has been resolved: fbdev: imxfb: Check fbaddvideomode to prevent null-ptr-deref fbaddvideomode can fail with -ENOMEM when its internal kmalloc cannot allocate a struct fbmodelist. If that happens, the modelist stays empty but the driver continues t...

AZL-73479 CVE-2025-38630 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: fbdev: imxfb: Check fbaddvideomode to prevent null-ptr-deref fbaddvideomode can fail with -ENOMEM when its internal kmalloc cannot allocate a struct fbmodelist. If that happens, the modelist stays empty but the driver continues t...

CVE-2025-38630

CVE-2025-38630 involves the Linux kernel fbdev imxfb driver. The issue arises when fb_add_videomode() returns -ENOMEM from internal kmalloc(), leaving the modelist empty but the driver still registers, risking a null pointer dereference. The patch adds a check on the return value to prevent this,...

PT-2025-40155

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue was addressed in the Linux kernel related to the fbdev subsystem and the imxfb driver. The problem involved an unnecessary call to release mem region in an error path, which cou...