CVE-2025-40323

CVE-2025-40323 is a use-after-free (UAF) vulnerability in the Linux kernel's framebuffer console (fbcon) component. It occurs because when a framebuffer's mode list is freed, the corresponding pointers in the global fb_display array are not nulled out, leading to dangling pointers. This can be triggered by specific sequences of framebuffer device registration, mode setting, and unregistration, as demonstrated by syzkaller. The vulnerability has no assigned CVSS score, but its FAUCET Risk Score is 7/100, indicating a relatively low severity. The attack vector involves local system calls, suggesting a high complexity to exploit and requiring prior access to the system. The potential impact is a system crash (denial of service) due to the UAF, as evidenced by the KASAN report. There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. The vulnerability has received no community discussion or media coverage, which is typical for the vast majority of CVEs.