CVE-2025-38612

staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()

MEDIUM

5.5

CVSS Score

Published: August 19, 2025 at 05:03 PM UTC

Updated: June 17, 2026 at 09:17 AM UTC

2 products affected across 2 vendorsLinux KernelDebian Linux

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() In the error paths after fb_info structure is successfully allocated, the memory allocated in fb_deferred_io_init() for info->pagerefs is not freed. Fix that by adding the cleanup function on the error path.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux · Debiandrupal

95%

11.0

Linux Kernel · Linux

95%

4.0 ≤ v < 5.10.2414.0 ≤ v < 5.15.1904.0 ≤ v < 5.4.2974.0 ≤ v < 6.1.1484.0 ≤ v < 6.12.424.0 ≤ v < 6.15.104.0 ≤ v < 6.16.14.0 ≤ v < 6.174.0 ≤ v < 6.6.1025.11 ≤ v < 5.15.1905.16 ≤ v < 6.1.1485.5 ≤ v < 5.10.2416.13 ≤ v < 6.15.106.16 ≤ v < 6.16.16.2 ≤ v < 6.6.1026.7 ≤ v < 6.12.424.0c296d5f9957c03994a699d6739c27d4581a9f6c7

Vendor states this is fixed in 3290f62f23fae05f2ec34085eb86dfb3648ef91f (fixed)

Vendor states this is fixed in 47b3d6e8921bbb7b65c2dab8eaa8864901848c1c (fixed)

Vendor states this is fixed in 6771f121ae87490ddc19eabb7450383af9e01b6d (fixed)

Vendor states this is fixed in 6f9e2cf9e9c1a891a683329af35bb33ed9d38b5f (fixed)

Vendor states this is fixed in 83ea0c7b8d12c67f6c4703d6c458627a7fc45fc0 (fixed)

Vendor states this is fixed in a3177955f8da3c826a18b75e54881e2e9a9c96f1 (fixed)

Vendor states this is fixed in b31cf6f7716a5d3e4461763f32d812acdaec6e74 (fixed)

Vendor states this is fixed in c3b1c45c48117ed4d8797ee89d1155f16b72d490 (fixed)

Vendor states this is fixed in eb2cb7dab60f9be0b435ac4a674255429a36d72c (fixed)

Vendor states this is fixed in 4.0 (unaffected)

Vendor states this is fixed in 5.10.241 (unaffected)

Vendor states this is fixed in 5.15.190 (unaffected)