In the Linux kernel, the following vulnerability has been resolved:
comedi: Fix initialization of data for instructions that write to subdevice
Some Comedi subdevice instruction handlers are known to access instruction data elements beyond the first `insn->n` elements in some cases. The `do_insn_ioctl()` and `do_insnlist_ioctl()` functions allocate at least `MIN_SAMPLES` (16) data elements to deal with this, but they do not initialize all of that. For Comedi instruction codes that write to the subdevice, the first `insn->n` data elements are copied from user-space, but the remaining elements are left uninitialized. That could be a problem if the subdevice instruction handler reads the uninitialized data. Ensure that the first `MIN_SAMPLES` elements are initialized before calling these instruction handlers, filling the uncopied elements with 0. For `do_insnlist_ioctl()`, the same data buffer elements are used for handling a list of instructions, so ensure the first `MIN_SAMPLES` elements are initialized for each instruction that writes to the subdevice.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 31, 2025 | Jul 31, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 14, 2025 | Jul 28, 2025 |
| Redhat_linux | — | No solution exists | Jul 31, 2025 | Jul 28, 2025 |
| Suse | — | Upgrade kernel-devel-rtUpgrade dtb-amdUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-debugUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade gfs2-kmp-64kbUpgrade kernel-rt-develUpgrade dtb-amlogicUpgrade dtb-apmUpgrade dtb-armUpgrade kselftests-kmp-rtUpgrade kernel-syms-azureUpgrade reiserfs-kmp-rtUpgrade kernel-macrosUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-defaultUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-socionextUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade kernel-rtUpgrade kernel-64kb-develUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade dtb-hisiliconUpgrade dtb-alteraUpgrade reiserfs-kmp-defaultUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-sourceUpgrade cluster-md-kmp-rtUpgrade dtb-amazonUpgrade ocfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade kselftests-kmp-azureUpgrade dtb-xilinxUpgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade kernel-debug-develUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-appleUpgrade kernel-source-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-64kbUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-default-optionalUpgrade dtb-renesasUpgrade dtb-marvellUpgrade dtb-lgUpgrade kernel-rt-livepatchUpgrade kernel-default-livepatchUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade dtb-qcomUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-vdsoUpgrade dtb-freescale | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-gke-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-fipsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-aws-64k-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-oracle-6.14Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1101-azureUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtual-5.15Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-generic-lpaeUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-fipsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-6.14Upgrade linux-image-generic-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-realtimeUpgrade linux-image-aws-fipsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-kvmUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.14.0-36-genericUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-azure-cvmUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-gcp-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-generic-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-raspiUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-azure-lts-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-intel-iotgUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-generic-64kUpgrade linux-image-fips-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1102-azureUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-oem-20.04Upgrade linux-image-intelUpgrade linux-image-oem-24.04Upgrade linux-image-aws-6.14Upgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04Upgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-1017-awsUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-raspi-6.14Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-xilinx-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-gcp-64kUpgrade linux-image-generic-6.14Upgrade linux-image-nvidia-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-aws-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-nvidia-tegraUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-xilinxUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-virtual-6.14Upgrade linux-image-raspi-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-163-genericUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp | Jul 31, 2025 | Jul 28, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Jul 28, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub