In the Linux kernel, the following vulnerability has been resolved:
comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
The handling of the `COMEDI_INSNLIST` ioctl allocates a kernel buffer to hold the array of `struct comedi_insn`, getting the length from the `n_insns` member of the `struct comedi_insnlist` supplied by the user. The allocation will fail with a WARNING and a stack dump if it is too large.
Avoid that by failing with an `-EINVAL` error if the supplied `n_insns` value is unreasonable.
Define the limit on the `n_insns` value in the `MAX_INSNS` macro. Set this to the same value as `MAX_SAMPLES` (65536), which is the maximum allowed sum of the values of the member `n` in the array of `struct comedi_insn`, and sensible comedi instructions will have an `n` of at least 1.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 31, 2025 | Jul 31, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 14, 2025 | Jul 28, 2025 |
| Suse | — | Upgrade dtb-armUpgrade kernel-azure-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-symsUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade kernel-develUpgrade cluster-md-kmp-64kbUpgrade dtb-qcomUpgrade dtb-lgUpgrade dtb-caviumUpgrade dtb-exynosUpgrade kernel-rt-livepatchUpgrade kernel-debugUpgrade kernel-64kb-extraUpgrade kernel-default-base-rebuildUpgrade kernel-default-vdsoUpgrade dtb-nvidiaUpgrade ocfs2-kmp-azureUpgrade kernel-sourceUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-source-azureUpgrade dtb-hisiliconUpgrade kernel-syms-azureUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-rtUpgrade dtb-rockchipUpgrade kselftests-kmp-64kbUpgrade kernel-source-vanillaUpgrade dlm-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-azureUpgrade kernel-rt_debugUpgrade dtb-broadcomUpgrade dtb-amdUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-default-extraUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade dtb-freescaleUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade kernel-zfcpdumpUpgrade kernel-source-rtUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-amazonUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade dtb-socionextUpgrade dtb-marvellUpgrade kernel-rt-extraUpgrade kernel-docsUpgrade dtb-amlogicUpgrade reiserfs-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-default | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-fips-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-azure-fips-6.8Upgrade linux-image-gkeUpgrade linux-image-oem-6.14Upgrade linux-image-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-generic-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-oem-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-gcp-6.8Upgrade linux-image-6.14.0-36-genericUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-fips-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-generic-5.15Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-fipsUpgrade linux-image-gcp-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-xilinxUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtual-5.15Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-intelUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-genericUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-gke-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-realtime-5.15Upgrade linux-image-raspiUpgrade linux-image-aws-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-azureUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-ibm-5.15Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-gke-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-5.15.0-1101-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-gcp-6.14Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-ibm-classicUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-6.14Upgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-generic-6.14Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-6.8 | Jul 31, 2025 | Jul 28, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Jul 28, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub