CVE-2025-40322
High
Description
In the Linux kernel, the following vulnerability has been resolved: fbdev: bitblit: bound-check glyph index in bit_putcs* bit_putcs_aligned()/unaligned() derived the glyph pointer from the character value masked by 0xff/0x1ff, which may exceed the actual font's glyph count and read past the end of the built-in font array. Clamp the index to the actual glyph count before computing the address. This fixes a global out-of-bounds read reported by syzbot.
SeverityHigh
CVSS7.1
Exploit probability—
Product
Linux
PublishedDec 8, 2025
First seenDec 8, 2025
How to fix
Update
- Linux Linuxa10cede006f9614b465cf25609a8753efbfd45cc, 0998a6cb232674408a03e8561dc15aa266b2f53b, db5c9a162d2f42bcc842b76b3d935dcc050a0eec, c12003bf91fdff381c55ef54fef3e961a5af2545, 9ba1a7802ca9a2590cef95b253e6526f4364477f, 901f44227072be60812fe8083e83e1533c04eed1, efaf89a75a29b2d179bf4fe63ca62852e93ad620, 18c4ef4e765a798b47980555ed665d78b71aeadf or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < a10cede006f9614b465cf25609a8753efbfd45cc, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 0998a6cb232674408a03e8561dc15aa266b2f53b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < db5c9a162d2f42bcc842b76b3d935dcc050a0eec, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < c12003bf91fdff381c55ef54fef3e961a5af2545, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 9ba1a7802ca9a2590cef95b253e6526f4364477f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 901f44227072be60812fe8083e83e1533c04eed1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < efaf89a75a29b2d179bf4fe63ca62852e93ad620, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 18c4ef4e765a798b47980555ed665d78b71aeadf, 2.6.12 | a10cede006f9614b465cf25609a8753efbfd45cc, 0998a6cb232674408a03e8561dc15aa266b2f53b, db5c9a162d2f42bcc842b76b3d935dcc050a0eec, c12003bf91fdff381c55ef54fef3e961a5af2545, 9ba1a7802ca9a2590cef95b253e6526f4364477f, 901f44227072be60812fe8083e83e1533c04eed1, efaf89a75a29b2d179bf4fe63ca62852e93ad620, 18c4ef4e765a798b47980555ed665d78b71aeadf |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.