In the Linux kernel, the following vulnerability has been resolved:
comedi: Fix initialization of data for instructions that write to subdevice
Some Comedi subdevice instruction handlers are known to access instruction data elements beyond the first `insn->n` elements in some cases. The `do_insn_ioctl()` and `do_insnlist_ioctl()` functions allocate at least `MIN_SAMPLES` (16) data elements to deal with this, but they do not initialize all of that. For Comedi instruction codes that write to the subdevice, the first `insn->n` data elements are copied from user-space, but the remaining elements are left uninitialized. That could be a problem if the subdevice instruction handler reads the uninitialized data. Ensure that the first `MIN_SAMPLES` elements are initialized before calling these instruction handlers, filling the uncopied elements with 0. For `do_insnlist_ioctl()`, the same data buffer elements are used for handling a list of instructions, so ensure the first `MIN_SAMPLES` elements are initialized for each instruction that writes to the subdevice.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 31, 2025 | Jul 31, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 14, 2025 | Jul 28, 2025 |
| Redhat_linux | — | No solution exists | Jul 31, 2025 | Jul 28, 2025 |
| Suse | — | Upgrade kernel-debug-develUpgrade kernel-default-develUpgrade kernel-default-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade kernel-source-rtUpgrade kernel-azureUpgrade kernel-rt-optionalUpgrade dtb-allwinnerUpgrade dtb-alteraUpgrade kernel-default-baseUpgrade dtb-caviumUpgrade dtb-xilinxUpgrade kernel-default-vdsoUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade kernel-rt-vdsoUpgrade kernel-azure-optionalUpgrade dlm-kmp-rtUpgrade kernel-obs-buildUpgrade dtb-qcomUpgrade kernel-azure-extraUpgrade kernel-default-livepatchUpgrade dtb-broadcomUpgrade dtb-exynosUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-rtUpgrade dtb-sprdUpgrade dtb-marvellUpgrade kernel-rt-livepatchUpgrade dtb-lgUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-appleUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade ocfs2-kmp-64kbUpgrade dtb-renesasUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade dtb-amazonUpgrade dtb-rockchipUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-vdsoUpgrade dtb-amdUpgrade kernel-devel-rtUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade kernel-rt_debugUpgrade kernel-default-extraUpgrade dlm-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-64kb-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade kernel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-syms-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade kernel-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade dtb-mediatekUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade reiserfs-kmp-rtUpgrade kernel-devel-azureUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade kselftests-kmp-rtUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-macrosUpgrade dtb-socionextUpgrade kernel-rt-livepatch-develUpgrade kernel-debug | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-fipsUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-generic-64k-6.14Upgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-generic-64k-5.15Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-oracleUpgrade linux-image-azure-lts-24.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-virtual-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-fipsUpgrade linux-image-azure-6.14Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1101-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-awsUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-gke-64kUpgrade linux-image-ibm-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gcp-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-virtual-6.8Upgrade linux-image-oem-6.14Upgrade linux-image-6.14.0-36-genericUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-5.15Upgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.14.0-1017-awsUpgrade linux-image-oem-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-gkeopUpgrade linux-image-azure-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-xilinxUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-raspi-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-virtual-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-6.14Upgrade linux-image-aws-lts-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-64kUpgrade linux-image-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-raspi-6.14Upgrade linux-image-fips-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-intelUpgrade linux-image-azure-5.15Upgrade linux-image-gcp-6.14Upgrade linux-image-oem-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-raspi-5.15Upgrade linux-image-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-fips-5.15Upgrade linux-image-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-ibmUpgrade linux-image-kvm-5.15Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-163-genericUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-realtime-5.15Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-gke-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-azure-fips-6.8Upgrade linux-image-virtual-hwe-24.04 | Jul 31, 2025 | Jul 28, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Jul 28, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub