-

CVE-2025-40106

In the Linux kernel, the following vulnerability has been resolved:

comedi: fix divide-by-zero in comedi_buf_munge()

The comedi_buf_munge() function performs a modulo operation
`async->munge_chan %= async->cmd.chanlist_len` without first
checking if chanlist_len is zero. If a user program submits a command with
chanlist_len set to zero, this causes a divide-by-zero error when the device
processes data in the interrupt handler path.

Add a check for zero chanlist_len at the beginning of the
function, similar to the existing checks for !map and
CMDF_RAWDATA flag. When chanlist_len is zero, update
munge_count and return early, indicating the data was
handled without munging.

This prevents potential kernel panics from malformed user commands.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version < 4ffea48c69cb2b96a281cb7e5e42d706996631db
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < 8f3e4cd9be4b47246ea73ce5e3e0fa2f57f0d10c
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < 2670932f2465793fea1ef073e40883e8390fa4d9
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < 6db19822512396be1a3e1e20c16c97270285ba1a
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < d4854eff25efb06d0d84c13e7129bbdba4125f8c
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < a4bb5d1bc2f238461bcbe5303eb500466690bb2c
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < 55520f65fd447e04099a2c44185453c18ea73b7e
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < 87b318ba81dda2ee7b603f4f6c55e78ec3e95974
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version <= 5.4.*
Version 5.4.301
Status unaffected
Version <= 5.10.*
Version 5.10.246
Status unaffected
Version <= 5.15.*
Version 5.15.196
Status unaffected
Version <= 6.1.*
Version 6.1.158
Status unaffected
Version <= 6.6.*
Version 6.6.115
Status unaffected
Version <= 6.12.*
Version 6.12.56
Status unaffected
Version <= 6.17.*
Version 6.17.6
Status unaffected
Version <= *
Version 6.18
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.06% 0.188
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String