Array Index Out of Bounds in Linux Kernel Affecting Console Drivers

CVE-2025-38198

What is CVE-2025-38198?

A vulnerability in the Linux kernel's console driver subsystem can lead to an array index out-of-bounds error when interacting with unregistered consoles. This issue occurs when writing to the 'store_modes' sysfs node, potentially resulting in erroneous behavior and system instability. If the console mapping, containing an invalid index, is accessed, it can cause improper error handling, leaving systems vulnerable to unexpected behaviors or crashes. Proper error handling measures should be implemented to ensure stability in console operations.

References