01 Record

CVE-2025-38685

fbdev: Fix vmalloc out-of-bounds write in fast_imageblit

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

fbdev: Fix vmalloc out-of-bounds write in fast_imageblit

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.17% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 6.7% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-30.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-09-04 15:32Z1 YR AGO

Last updated

2026-08-05 12:03Z1 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-787Out-of-bounds WriteBase

Data version

5.2

Document digest

edaac227a53056c74402d9265115898013720bdad5bfbbab1b684aff394b2d8f

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 078e62bffca4b7e72e8f3550eb063ab981c36c7a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 4c4d7ddaf1d43780b106bedc692679f965dc5a3a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 27b118aebdd84161c8ff5ce49d9d536f2af10754, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < ed9b8e5016230868c8d813d9179523f729fec8c6, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 56701bf9eeb63219e378cb7fcbd066ea4eaeeb50, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < cfec17721265e72e50cc69c6004fe3475cd38df2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < af0db3c1f898144846d4c172531a199bb3ca375d, 2.6.12—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/078e62bffca4b7e72e8f3550eb063ab981c36c7a
git.kernel.orghttps://git.kernel.org/stable/c/4c4d7ddaf1d43780b106bedc692679f965dc5a3a
git.kernel.orghttps://git.kernel.org/stable/c/27b118aebdd84161c8ff5ce49d9d536f2af10754
git.kernel.orghttps://git.kernel.org/stable/c/ed9b8e5016230868c8d813d9179523f729fec8c6
git.kernel.orghttps://git.kernel.org/stable/c/56701bf9eeb63219e378cb7fcbd066ea4eaeeb50
git.kernel.orghttps://git.kernel.org/stable/c/cfec17721265e72e50cc69c6004fe3475cd38df2
git.kernel.orghttps://git.kernel.org/stable/c/af0db3c1f898144846d4c172531a199bb3ca375d
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-082556.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-032379.html

01 Record index

CVE-2025-38685

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-38685

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References