Search: CVE-2025-38449

A vulnerability in the Linux kernel's DRM GEM subsystem allowed GEM handles for framebuffers to be released prematurely, leading to use-after-free conditions and segmentation faults during mode-setting operations. This issue arises when a GEM handle is released while still attached to a DRM framebuffer, causing the dma-buf backing the buffer object to be freed improperly. The flaw was fixed by ensuring GEM handles are properly acquired and referenced, preventing the premature release. The vulnerability affects specific Linux kernel versions and has a CVSS score of 7.8 (high impact).