PT-2025-35958 · Linux +1 · Linux Kernel +1

Published

2025-09-04

·

Updated

2025-09-04

·

CVE-2025-38685

Report an issue

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

Name of the Vulnerable Software and Affected Versions:

Linux kernel (affected versions not specified)

Description:

The Linux kernel contains a flaw in the fbdev subsystem related to an out-of-bounds write in the `fast imageblit()` function. This issue occurs when a user-space program performs an ioctl `FBIOPUT CON2FBMAP` operation, providing a console number and frame buffer number. Specifically, the issue arises during console resizing when a resize operation fails but processing continues with mismatched console and frame buffer data, leading to an out-of-bounds write during screen updates in `fbcon putcs()`.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2025-38685

Affected Products

Debian
Linux Kernel