CVE-2025-38427 is a medium severity vulnerability in the Linux kernel's video subsystem related to framebuffer memory relocation behind PCI bridges. The issue involves invalid access to I/O memory due to the framebuffer addresses in screen_info not being updated to reflect PCI host-bridge window offsets assigned during boot. This flaw can cause availability impact due to improper memory handling.