-

CVE-2025-38482

In the Linux kernel, the following vulnerability has been resolved:

comedi: das6402: Fix bit shift out of bounds

When checking for a supported IRQ number, the following test is used:

	/* IRQs 2,3,5,6,7, 10,11,15 are valid for "enhanced" mode */
	if ((1 << it->options[1]) & 0x8cec) {

However, `it->options[i]` is an unchecked `int` value from userspace, so
the shift amount could be negative or out of bounds.  Fix the test by
requiring `it->options[1]` to be within bounds before proceeding with
the original test.  Valid `it->options[1]` values that select the IRQ
will be in the range [1,15]. The value 0 explicitly disables the use of
interrupts.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version < a15e9c175f783298c4ee48146be6841335400406
Version 79e5e6addbb18bf56075f0ff552094a28636dd03
Status affected
Version < de8da1063cce9234d55c8270d9bdf4cf84411c80
Version 79e5e6addbb18bf56075f0ff552094a28636dd03
Status affected
Version < 73f34d609397805c20d6b2ef5c07a4cbf7c4d63a
Version 79e5e6addbb18bf56075f0ff552094a28636dd03
Status affected
Version < a18a42e77545afcacd6a2b8d9fc16191b87454df
Version 79e5e6addbb18bf56075f0ff552094a28636dd03
Status affected
Version < 8a3637027ceeba4ca5e500b23cb7d24c25592513
Version 79e5e6addbb18bf56075f0ff552094a28636dd03
Status affected
Version < 3eab654f5d199ecd45403c6588cda63e491fcfca
Version 79e5e6addbb18bf56075f0ff552094a28636dd03
Status affected
Version < 4a3c18cde02e35aba87e0ad5672b3e1c72dda5a4
Version 79e5e6addbb18bf56075f0ff552094a28636dd03
Status affected
Version < 70f2b28b5243df557f51c054c20058ae207baaac
Version 79e5e6addbb18bf56075f0ff552094a28636dd03
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version 3.15
Status affected
Version < 3.15
Version 0
Status unaffected
Version <= 5.4.*
Version 5.4.297
Status unaffected
Version <= 5.10.*
Version 5.10.241
Status unaffected
Version <= 5.15.*
Version 5.15.190
Status unaffected
Version <= 6.1.*
Version 6.1.147
Status unaffected
Version <= 6.6.*
Version 6.6.100
Status unaffected
Version <= 6.12.*
Version 6.12.40
Status unaffected
Version <= 6.15.*
Version 6.15.8
Status unaffected
Version <= *
Version 6.16
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.04% 0.103
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String