In the Linux kernel, the following vulnerability has been resolved:
fbdev: imxfb: Check fbaddvideomode to prevent null-ptr-deref
fbaddvideomode() can fail with -ENOMEM when its internal kmalloc() cannot allocate a struct fbmodelist. If that happens, the modelist stays empty but the driver continues to register. Add a check for its return value to prevent poteintial null-ptr-deref, which is similar to the commit 17186f1f90d3 ("fbdev: Fix doregisterframebuffer to prevent null-ptr-deref in fbvideomodetovar").
[
{
"id": "CVE-2025-38630-213cbde6",
"signature_version": "v1",
"digest": {
"function_hash": "34982102196966792299822964452058379177",
"length": 3292.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da11e6a30e0bb8e911288bdc443b3dc8f6a7cac7",
"target": {
"file": "drivers/video/fbdev/imxfb.c",
"function": "imxfb_probe"
}
},
{
"id": "CVE-2025-38630-3273da4e",
"signature_version": "v1",
"digest": {
"function_hash": "315035756045744931473513657991446718058",
"length": 4185.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f00c29e6755ead56baf2a9c1d3c4c0bb40af3612",
"target": {
"file": "drivers/video/fbdev/imxfb.c",
"function": "imxfb_probe"
}
},
{
"id": "CVE-2025-38630-5c0bf1c9",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"132803147352867694269710185673431641490",
"124933999559856752501504929245558025423",
"296865308027105753542900973154778924168",
"14943751879001406805190066587242376250",
"316419842398836464534849980461228550791"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@69373502c2b5d364842c702c941d1171e4f35a7c",
"target": {
"file": "drivers/video/fbdev/imxfb.c"
}
},
{
"id": "CVE-2025-38630-5e60cf4a",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"207816948782569127128807096294703828321",
"330619947763534114922247579144395829844",
"296865308027105753542900973154778924168",
"14943751879001406805190066587242376250",
"316419842398836464534849980461228550791"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da11e6a30e0bb8e911288bdc443b3dc8f6a7cac7",
"target": {
"file": "drivers/video/fbdev/imxfb.c"
}
},
{
"id": "CVE-2025-38630-69bd7df5",
"signature_version": "v1",
"digest": {
"function_hash": "157328657107595678607282379755944022171",
"length": 3334.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b5d36cc3014986e6fac12eaa8433fe56801d4ce",
"target": {
"file": "drivers/video/fbdev/imxfb.c",
"function": "imxfb_probe"
}
},
{
"id": "CVE-2025-38630-7aa56751",
"signature_version": "v1",
"digest": {
"function_hash": "34982102196966792299822964452058379177",
"length": 3292.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@49377bac9e3bec1635065a033c9679214fe7593e",
"target": {
"file": "drivers/video/fbdev/imxfb.c",
"function": "imxfb_probe"
}
},
{
"id": "CVE-2025-38630-887025a5",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"207816948782569127128807096294703828321",
"330619947763534114922247579144395829844",
"296865308027105753542900973154778924168",
"14943751879001406805190066587242376250",
"316419842398836464534849980461228550791"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@49377bac9e3bec1635065a033c9679214fe7593e",
"target": {
"file": "drivers/video/fbdev/imxfb.c"
}
},
{
"id": "CVE-2025-38630-91db3ce2",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"207816948782569127128807096294703828321",
"330619947763534114922247579144395829844",
"296865308027105753542900973154778924168",
"14943751879001406805190066587242376250",
"316419842398836464534849980461228550791"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b5d36cc3014986e6fac12eaa8433fe56801d4ce",
"target": {
"file": "drivers/video/fbdev/imxfb.c"
}
},
{
"id": "CVE-2025-38630-9deddb08",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"132803147352867694269710185673431641490",
"124933999559856752501504929245558025423",
"296865308027105753542900973154778924168",
"14943751879001406805190066587242376250",
"316419842398836464534849980461228550791"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f00c29e6755ead56baf2a9c1d3c4c0bb40af3612",
"target": {
"file": "drivers/video/fbdev/imxfb.c"
}
},
{
"id": "CVE-2025-38630-fd100464",
"signature_version": "v1",
"digest": {
"function_hash": "143962410714652701948364551101876232593",
"length": 4220.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@69373502c2b5d364842c702c941d1171e4f35a7c",
"target": {
"file": "drivers/video/fbdev/imxfb.c",
"function": "imxfb_probe"
}
}
]