PT-2025-27973 · Linux+5 · Linux Kernel+5
Published
2025-07-04
·
Updated
2026-04-20
·
CVE-2025-38198
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A vulnerability in the Linux kernel has been resolved, related to the fbcon module. The issue occurs when attempting to write to the "store modes" sysfs node, which can cause an array-index-out-of-bounds error in the
fbcon info from console function. This happens when the con2fb map array contains a -1 value, indicating an unregistered console. The error handling has been improved to return NULL in such cases, allowing callers to correctly compare against existing "info" pointers.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Validation of Array Index
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu