CVE-2025-40322: fbdev: bitblit: bound-check glyph index in bit_putcs*
fbdev: bitblit: bound-check glyph index in bitputcs
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Update the Linux kernel to include the fix for fbdev bitblit: bound-check glyph index in bit_putcs* (clamp the index to the actual glyph count before computing the glyph address) to prevent global out-of-bounds reads.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40322?
CVE-2025-40322 has been classified as a moderate-severity vulnerability in the Linux kernel.
How do I fix CVE-2025-40322?
To fix CVE-2025-40322, update your Linux kernel to the latest patched version that addresses this vulnerability.
What type of vulnerability is CVE-2025-40322?
CVE-2025-40322 is a type of out-of-bounds read vulnerability affecting the fbdev subsystem in the Linux kernel.
Which software is affected by CVE-2025-40322?
CVE-2025-40322 affects the Linux kernel, specifically within its framebuffer device (fbdev) implementation.
Can CVE-2025-40322 lead to a system compromise?
Yes, CVE-2025-40322 could potentially allow an attacker to read unauthorized memory regions, leading to information disclosure.