fbdev: Fix vmalloc out-of-bounds write in fast_imageblit

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-38685 · Microsoft / collected KEV context

cve-program · CVE-2025-38685

• https://git.kernel.org/stable/c/078e62bffca4b7e72e8f3550eb063ab981c36c7a
• https://git.kernel.org/stable/c/4c4d7ddaf1d43780b106bedc692679f965dc5a3a
• https://git.kernel.org/stable/c/27b118aebdd84161c8ff5ce49d9d536f2af10754
• https://git.kernel.org/stable/c/ed9b8e5016230868c8d813d9179523f729fec8c6
• https://git.kernel.org/stable/c/56701bf9eeb63219e378cb7fcbd066ea4eaeeb50
• https://git.kernel.org/stable/c/cfec17721265e72e50cc69c6004fe3475cd38df2
• https://git.kernel.org/stable/c/af0db3c1f898144846d4c172531a199bb3ca375d

No related operational record is retained in the current change model.