Null Pointer Dereference Vulnerability in Linux Kernel's Framebuffer Driver

CVE-2025-38630

What is CVE-2025-38630?

A vulnerability in the Linux kernel's framebuffer driver may lead to a null pointer dereference issue. The function fb_add_videomode() can return -ENOMEM if memory allocation fails, which can result in an empty modelist while allowing the driver to continue its registration process. This flaw necessitates a check for the return value of fb_add_videomode() to prevent potential null pointer dereference, mirroring corrections made in previous commits to enhance the driver's stability.

References