CVE-2025-38214— Linux kernel 安全漏洞
一分钟漏洞结论
影响对象
Linux Linux
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未检查空指针导致空指针取消引用。
可能的 ATT&CK 技术 1 AI
T1068 · Exploitation for Privilege Escalation影响版本矩阵 18
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| Linux | Linux | 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2< ee20216f12d9482cd70e44dae5e7fabb38367c71 |
affected |
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2< fab201d72fde38d081e2c5d4ad25595c535b7b22 |
affected | ||
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2< 1a10d91766eb6ddfd5414e4785611e33a4fe0f9b |
affected | ||
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2< ff0e037241173b574b385bff53d67567b9816db5 |
affected | ||
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2< 3ca78032a388a0795201792b36e6fc9b6e6e8eed |
affected | ||
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2< b3071bb463ea1e6c686d0dc9638fc940f2f5cf17 |
affected | ||
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2< 8a3a2887794b2c8e78b3e5d6e3de724527c9f41b |
affected | ||
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2< 05f6e183879d9785a3cdf2f08a498bc31b7a20aa |
affected | ||
| … +10 条更多 | |||
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2025-38214 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
来源: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
If fb_add_videomode() in fb_set_var() fails to allocate memory for
fb_videomode, later it may lead to a null-ptr dereference in
fb_videomode_to_var(), as the fb_info is registered while not having the
mode in modelist that is expected to be there, i.e. the one that is
described in fb_info->var.
================================================================
general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN NOPTI
KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
CPU: 1 PID: 30371 Comm: syz-executor.1 Not tainted 5.10.226-syzkaller #0
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:fb_videomode_to_var+0x24/0x610 drivers/video/fbdev/core/modedb.c:901
Call Trace:
display_to_var+0x3a/0x7c0 drivers/video/fbdev/core/fbcon.c:929
fbcon_resize+0x3e2/0x8f0 drivers/video/fbdev/core/fbcon.c:2071
resize_screen drivers/tty/vt/vt.c:1176 [inline]
vc_do_resize+0x53a/0x1170 drivers/tty/vt/vt.c:1263
fbcon_modechanged+0x3ac/0x6e0 drivers/video/fbdev/core/fbcon.c:2720
fbcon_update_vcs+0x43/0x60 drivers/video/fbdev/core/fbcon.c:2776
do_fb_ioctl+0x6d2/0x740 drivers/video/fbdev/core/fbmem.c:1128
fb_ioctl+0xe7/0x150 drivers/video/fbdev/core/fbmem.c:1203
vfs_ioctl fs/ioctl.c:48 [inline]
__do_sys_ioctl fs/ioctl.c:753 [inline]
__se_sys_ioctl fs/ioctl.c:739 [inline]
__x64_sys_ioctl+0x19a/0x210 fs/ioctl.c:739
do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46
entry_SYSCALL_64_after_hwframe+0x67/0xd1
================================================================
The reason is that fb_info->var is being modified in fb_set_var(), and
then fb_videomode_to_var() is called. If it fails to add the mode to
fb_info->modelist, fb_set_var() returns error, but does not restore the
old value of fb_info->var. Restore fb_info->var on failure the same way
it is done earlier in the function.
Found by Linux Verification Center (linuxtesting.org) with Syzkaller.
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未检查空指针导致空指针取消引用。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
二、漏洞 CVE-2025-38214 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2025-38214 的情报信息
请登录查看更多情报信息。
同批安全公告 · Linux · 2025-07-04 · 共 59 条
| CVE-2025-38209 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2025-38211 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2025-38174 | 8.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38216 | 8.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38233 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38230 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38227 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38226 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38224 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38218 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38232 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38212 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38175 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38234 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38206 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38204 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38192 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38187 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38184 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38180 | 7.8 HIGH | Linux kernel 安全漏洞 |
显示前 20 条，共 59 条。 查看全部 → →
IV. Related Vulnerabilities
V. Comments for CVE-2025-38214
暂无评论