In the Linux kernel, the following vulnerability has been resolved:
comedi: Fix initialization of data for instructions that write to subdevice
Some Comedi subdevice instruction handlers are known to access instruction data elements beyond the first `insn->n` elements in some cases. The `do_insn_ioctl()` and `do_insnlist_ioctl()` functions allocate at least `MIN_SAMPLES` (16) data elements to deal with this, but they do not initialize all of that. For Comedi instruction codes that write to the subdevice, the first `insn->n` data elements are copied from user-space, but the remaining elements are left uninitialized. That could be a problem if the subdevice instruction handler reads the uninitialized data. Ensure that the first `MIN_SAMPLES` elements are initialized before calling these instruction handlers, filling the uncopied elements with 0. For `do_insnlist_ioctl()`, the same data buffer elements are used for handling a list of instructions, so ensure the first `MIN_SAMPLES` elements are initialized for each instruction that writes to the subdevice.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 31, 2025 | Jul 31, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 14, 2025 | Jul 28, 2025 |
| Redhat_linux | — | No solution exists | Jul 31, 2025 | Jul 28, 2025 |
| Suse | — | Upgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-default-livepatch-develUpgrade kernel-source-azureUpgrade kernel-source-rtUpgrade dtb-lgUpgrade kernel-azureUpgrade dtb-appleUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-amazonUpgrade dtb-nvidiaUpgrade gfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-azureUpgrade dtb-qcomUpgrade kernel-default-baseUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-azure-optionalUpgrade dtb-allwinnerUpgrade dtb-alteraUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade kernel-debug-develUpgrade kernel-obs-buildUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-default-vdsoUpgrade kernel-develUpgrade dtb-exynosUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade dtb-marvellUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatchUpgrade dlm-kmp-rtUpgrade kernel-debug-vdsoUpgrade dtb-broadcomUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade dtb-sprdUpgrade dtb-renesasUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-default-base-rebuildUpgrade dtb-socionextUpgrade kselftests-kmp-defaultUpgrade kernel-macrosUpgrade dtb-hisiliconUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade kernel-azure-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-devel-rtUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade kernel-syms-azureUpgrade kernel-rt_debugUpgrade dtb-amlogicUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade kernel-debugUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade dtb-mediatekUpgrade dlm-kmp-azureUpgrade kernel-zfcpdumpUpgrade dtb-armUpgrade dtb-apmUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade gfs2-kmp-64kbUpgrade kernel-obs-qaUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rt | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-aws-fipsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-gke-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-oracle-6.14Upgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracle-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1101-azureUpgrade linux-image-ibm-classicUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-realtimeUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-oem-6.14Upgrade linux-image-fipsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-azure-cvmUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-aws-64k-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-oem-22.04aUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04cUpgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-ibmUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oem-20.04dUpgrade linux-image-gcp-64kUpgrade linux-image-azureUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-gke-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-generic-6.14Upgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-intelUpgrade linux-image-intel-iotgUpgrade linux-image-azure-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1102-azureUpgrade linux-image-gkeUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-raspi-5.15Upgrade linux-image-raspi-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-20.04bUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-xilinxUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-oem-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-raspiUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.14.0-1017-awsUpgrade linux-image-nvidia-5.15Upgrade linux-image-virtualUpgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-163-fipsUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-virtual-6.14Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gcp-fips-6.8 | Jul 31, 2025 | Jul 28, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Jul 28, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub