-

CVE-2025-40106

In the Linux kernel, the following vulnerability has been resolved:

comedi: fix divide-by-zero in comedi_buf_munge()

The comedi_buf_munge() function performs a modulo operation
`async->munge_chan %= async->cmd.chanlist_len` without first
checking if chanlist_len is zero. If a user program submits a command with
chanlist_len set to zero, this causes a divide-by-zero error when the device
processes data in the interrupt handler path.

Add a check for zero chanlist_len at the beginning of the
function, similar to the existing checks for !map and
CMDF_RAWDATA flag. When chanlist_len is zero, update
munge_count and return early, indicating the data was
handled without munging.

This prevents potential kernel panics from malformed user commands.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version < 4ffea48c69cb2b96a281cb7e5e42d706996631db
Version ed9eccbe8970f6eedc1b978c157caf1251a896d4
Status affected
Version < 8f3e4cd9be4b47246ea73ce5e3e0fa2f57f0d10c
Version ed9eccbe8970f6eedc1b978c157caf1251a896d4
Status affected
Version < 2670932f2465793fea1ef073e40883e8390fa4d9
Version ed9eccbe8970f6eedc1b978c157caf1251a896d4
Status affected
Version < 6db19822512396be1a3e1e20c16c97270285ba1a
Version ed9eccbe8970f6eedc1b978c157caf1251a896d4
Status affected
Version < d4854eff25efb06d0d84c13e7129bbdba4125f8c
Version ed9eccbe8970f6eedc1b978c157caf1251a896d4
Status affected
Version < a4bb5d1bc2f238461bcbe5303eb500466690bb2c
Version ed9eccbe8970f6eedc1b978c157caf1251a896d4
Status affected
Version < 55520f65fd447e04099a2c44185453c18ea73b7e
Version ed9eccbe8970f6eedc1b978c157caf1251a896d4
Status affected
Version < 87b318ba81dda2ee7b603f4f6c55e78ec3e95974
Version ed9eccbe8970f6eedc1b978c157caf1251a896d4
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version 2.6.29
Status affected
Version < 2.6.29
Version 0
Status unaffected
Version <= 5.4.*
Version 5.4.301
Status unaffected
Version <= 5.10.*
Version 5.10.246
Status unaffected
Version <= 5.15.*
Version 5.15.196
Status unaffected
Version <= 6.1.*
Version 6.1.158
Status unaffected
Version <= 6.6.*
Version 6.6.115
Status unaffected
Version <= 6.12.*
Version 6.12.56
Status unaffected
Version <= 6.17.*
Version 6.17.6
Status unaffected
Version <= *
Version 6.18
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.05% 0.166
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.