Reference Counting Issue in Linux Kernel Affecting DRM Framebuffers

CVE-2025-38449

What is CVE-2025-38449?

A vulnerability in the Linux kernel can lead to segmentation faults in graphics drivers when DRM framebuffers improperly handle GEM buffer object references. If a GEM handle is released while still attached to a framebuffer, subsequent mode-setting operations may attempt to use an invalid memory reference, causing a crash. This issue is exacerbated by drivers that utilize shadow planes for vmap-ing DMA buffers during page flips. The fault triggers easily due to improper reference counting, leading to potential system instability.

References