In the Linux kernel, the following vulnerability has been resolved:
comedi: Fix initialization of data for instructions that write to subdevice
Some Comedi subdevice instruction handlers are known to access instruction data elements beyond the first `insn->n` elements in some cases. The `do_insn_ioctl()` and `do_insnlist_ioctl()` functions allocate at least `MIN_SAMPLES` (16) data elements to deal with this, but they do not initialize all of that. For Comedi instruction codes that write to the subdevice, the first `insn->n` data elements are copied from user-space, but the remaining elements are left uninitialized. That could be a problem if the subdevice instruction handler reads the uninitialized data. Ensure that the first `MIN_SAMPLES` elements are initialized before calling these instruction handlers, filling the uncopied elements with 0. For `do_insnlist_ioctl()`, the same data buffer elements are used for handling a list of instructions, so ensure the first `MIN_SAMPLES` elements are initialized for each instruction that writes to the subdevice.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 31, 2025 | Jul 31, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 14, 2025 | Jul 28, 2025 |
| Redhat_linux | — | No solution exists | Jul 31, 2025 | Jul 28, 2025 |
| Suse | — | Upgrade dtb-apmUpgrade kselftests-kmp-rtUpgrade kernel-rt-develUpgrade gfs2-kmp-64kbUpgrade dtb-armUpgrade kernel-devel-azureUpgrade kernel-syms-rtUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-syms-azureUpgrade dtb-amlogicUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade dtb-mediatekUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade kernel-defaultUpgrade dtb-hisiliconUpgrade kernel-rtUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-azure-develUpgrade dtb-amdUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade dtb-rockchipUpgrade kernel-debugUpgrade kernel-docsUpgrade kernel-default-base-rebuildUpgrade kernel-default-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-develUpgrade kernel-rt-extraUpgrade dtb-allwinnerUpgrade dtb-nvidiaUpgrade reiserfs-kmp-defaultUpgrade dtb-exynosUpgrade kernel-default-vdsoUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade kernel-source-vanillaUpgrade kernel-64kbUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade kernel-default-livepatchUpgrade dtb-broadcomUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-sourceUpgrade kernel-rt-livepatchUpgrade kernel-default-optionalUpgrade dtb-renesasUpgrade dtb-marvellUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade dtb-appleUpgrade kernel-64kb-extraUpgrade dtb-xilinxUpgrade dtb-caviumUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kernel-azure-optionalUpgrade dtb-qcomUpgrade kernel-azure-extraUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-vdsoUpgrade dtb-freescaleUpgrade kernel-docs-htmlUpgrade dtb-amazonUpgrade ocfs2-kmp-default | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatency-5.15Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-fips-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-aws-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1102-azureUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-raspi-6.14Upgrade linux-image-oem-20.04bUpgrade linux-image-intel-iotgUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-gcp-6.14Upgrade linux-image-azure-5.15Upgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-realtime-5.15Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-ibmUpgrade linux-image-generic-6.14Upgrade linux-image-azure-fips-5.15Upgrade linux-image-azureUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-xilinx-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-kvm-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-gke-5.15Upgrade linux-image-genericUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-aws-6.14Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-gkeopUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-163-fipsUpgrade linux-image-virtual-6.14Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-gke-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-intelUpgrade linux-image-raspi-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-xilinxUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-gcpUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-fips-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-aws-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-5.15Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1101-azureUpgrade linux-image-virtual-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-generic-64k-6.14Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-oracle-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-kvmUpgrade linux-image-ibm-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-fipsUpgrade linux-image-oem-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-aws-64k-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-gke-64kUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-nvidia-lowlatency-64k | Jul 31, 2025 | Jul 28, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Jul 28, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub