CVE-2025-38449 is a use-after-free vulnerability in the Linux kernel's DRM subsystem related to GEM handles for framebuffers. The flaw occurs because GEM handles can be released while still attached to DRM framebuffers, leading to the release of the dma-buf backing the buffer object. Subsequent use of the framebuffer in mode-setting operations can cause a kernel segmentation fault. This issue is triggered more easily by drivers using shadow planes for vmap-ing dma-buf during page flips. The vulnerability has been addressed by acquiring references on GEM handles to prevent premature release.