0.0
NA
CVE-2025-38612
Linux Kernel Fbtft Framebuffer Memory Leak Vulnerability
Description

In the Linux kernel, the following vulnerability has been resolved: staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() In the error paths after fb_info structure is successfully allocated, the memory allocated in fb_deferred_io_init() for info->pagerefs is not freed. Fix that by adding the cleanup function on the error path.

INFO

Published Date :

Aug. 19, 2025, 5:15 p.m.

Last Modified :

Aug. 20, 2025, 2:40 p.m.

Remotely Exploit :

No

Source :

416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Products

The following products are affected by CVE-2025-38612 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Linux linux_kernel
: Total Affected Vendor : 1 | Products : 1
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2025-38612.

URL Resource
https://git.kernel.org/stable/c/47b3d6e8921bbb7b65c2dab8eaa8864901848c1c
https://git.kernel.org/stable/c/6771f121ae87490ddc19eabb7450383af9e01b6d
https://git.kernel.org/stable/c/6f9e2cf9e9c1a891a683329af35bb33ed9d38b5f
https://git.kernel.org/stable/c/a3177955f8da3c826a18b75e54881e2e9a9c96f1
https://git.kernel.org/stable/c/b31cf6f7716a5d3e4461763f32d812acdaec6e74
https://git.kernel.org/stable/c/eb2cb7dab60f9be0b435ac4a674255429a36d72c
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2025-38612 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2025-38612 weaknesses.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2025-38612 vulnerability anywhere in the article.

Results are limited to the first 20 news articles due to potential performance issues.

The following table lists the changes that have been made to the CVE-2025-38612 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Aug. 19, 2025

    Action Type Old Value New Value
    Added Description In the Linux kernel, the following vulnerability has been resolved: staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() In the error paths after fb_info structure is successfully allocated, the memory allocated in fb_deferred_io_init() for info->pagerefs is not freed. Fix that by adding the cleanup function on the error path.
    Added Reference https://git.kernel.org/stable/c/47b3d6e8921bbb7b65c2dab8eaa8864901848c1c
    Added Reference https://git.kernel.org/stable/c/6771f121ae87490ddc19eabb7450383af9e01b6d
    Added Reference https://git.kernel.org/stable/c/6f9e2cf9e9c1a891a683329af35bb33ed9d38b5f
    Added Reference https://git.kernel.org/stable/c/a3177955f8da3c826a18b75e54881e2e9a9c96f1
    Added Reference https://git.kernel.org/stable/c/b31cf6f7716a5d3e4461763f32d812acdaec6e74
    Added Reference https://git.kernel.org/stable/c/eb2cb7dab60f9be0b435ac4a674255429a36d72c
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
Vulnerability Scoring Details
No CVSS metrics available for this vulnerability.