Log in Start free

Vulnerability · Published May 9, 2025 · Assigned by Linux

CVE-2025-37851fbdev: omapfb: Add 'plane' value check

Medium 5.5

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.3%top 77.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: Add 'plane' value check Function dispc_ovl_setup is not intended to work with the value OMAP_DSS_WB of the enum parameter plane. The value of this parameter is initialized in dss_init_overlays and in the current state of the code it cannot take this value so it's not a real problem. For the purposes of defensive coding it wouldn't be superfluous to check the parameter value, because some functions down the call stack process this value correctly and some not. For example, in dispc_ovl_setup_global_alpha it may lead to buffer overflow. Add check for this value. Found by Linux Verification Center (linuxtesting.org) with SVACE static analysis tool.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.135-1DEBIAN-CVE-2025-37851
Debian:13linux6.12.25-1DEBIAN-CVE-2025-37851
Debian:14linux6.12.25-1DEBIAN-CVE-2025-37851
Ubuntu:22.04:LTSlinux5.15.0-144.157UBUNTU-CVE-2025-37851
Ubuntu:24.04:LTSlinux6.8.0-100.100UBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-aws5.15.0-1088.95UBUNTU-CVE-2025-37851
Ubuntu:24.04:LTSlinux-aws6.8.0-1046.49UBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1046.49~22.04.1UBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-azure5.15.0-1094.103UBUNTU-CVE-2025-37851
Ubuntu:24.04:LTSlinux-azure6.8.0-1046.52UBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-37851
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1051.57~22.04.1UBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1094.103.1UBUNTU-CVE-2025-37851
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1046.53UBUNTU-CVE-2025-37851
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1046.53~22.04.1UBUNTU-CVE-2025-37851
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-gcp5.15.0-1087.96UBUNTU-CVE-2025-37851
Ubuntu:24.04:LTSlinux-gcp6.8.0-1047.50UBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-37851
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1047.50~22.04.2UBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-gke5.15.0-1085.91UBUNTU-CVE-2025-37851
Ubuntu:24.04:LTSlinux-gke6.8.0-1043.48UBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1070.78UBUNTU-CVE-2025-37851
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1030.33UBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-37851
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-100.100~22.04.1UBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-ibm5.15.0-1080.83UBUNTU-CVE-2025-37851
Ubuntu:24.04:LTSlinux-ibm6.8.0-1044.44UBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1044.44~22.04.1UBUNTU-CVE-2025-37851
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1083.89UBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-kvm5.15.0-1084.89UBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-144.157UBUNTU-CVE-2025-37851
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-100.100.1UBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-37851
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-100.100.1~22.04.1UBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1082.83UBUNTU-CVE-2025-37851
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1046.49UBUNTU-CVE-2025-37851
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1046.49~22.04.1UBUNTU-CVE-2025-37851
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1046.49.1UBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1041.41UBUNTU-CVE-2025-37851
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1020.20UBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1030.30UBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-37851
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-37851
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-oracle5.15.0-1085.91UBUNTU-CVE-2025-37851
Ubuntu:24.04:LTSlinux-oracle6.8.0-1043.44UBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1043.44~22.04.1UBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-raspi5.15.0-1083.86UBUNTU-CVE-2025-37851
Ubuntu:24.04:LTSlinux-raspi6.8.0-1047.51UBUNTU-CVE-2025-37851
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-37851
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-37851
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-100.100~22.04.1UBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-37851
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1023.24UBUNTU-CVE-2025-37851
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1052.56UBUNTU-CVE-2025-37851

Affected products (as reported)

VendorProductVersions
Linux Linux 559d67018950ced65c73358cd69c4bdd2b0c5dd6 – before a570efb4d877adbf3db2dc95487f2ba6bfdd148a559d67018950ced65c73358cd69c4bdd2b0c5dd6 – before cdf41d72e8b015d9ea68f5a1c0a79624e7c312aa559d67018950ced65c73358cd69c4bdd2b0c5dd6 – before 09dbf22fd68c2f1a81ab89670ffa1ec3033436c4559d67018950ced65c73358cd69c4bdd2b0c5dd6 – before 660a53a0694d1f3789802509fe729dd4656fc5e0559d67018950ced65c73358cd69c4bdd2b0c5dd6 – before fda15c5b96b883d62fb2d84a3a1422aa87717897559d67018950ced65c73358cd69c4bdd2b0c5dd6 – before 52eafaa56f8f6d6a0cdff9282b25b4acbde34edc559d67018950ced65c73358cd69c4bdd2b0c5dd6 – before 9b0a41589ee70529b20e1e0108d03f10c649bdc4559d67018950ced65c73358cd69c4bdd2b0c5dd6 – before 4efd8ef5e40f2c7a4a91a5a9f03140bfa827da89
Linux Linux 2.6.33

References