In the Linux kernel, the following vulnerability has been resolved:
comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
The handling of the `COMEDI_INSNLIST` ioctl allocates a kernel buffer to hold the array of `struct comedi_insn`, getting the length from the `n_insns` member of the `struct comedi_insnlist` supplied by the user. The allocation will fail with a WARNING and a stack dump if it is too large.
Avoid that by failing with an `-EINVAL` error if the supplied `n_insns` value is unreasonable.
Define the limit on the `n_insns` value in the `MAX_INSNS` macro. Set this to the same value as `MAX_SAMPLES` (65536), which is the maximum allowed sum of the values of the member `n` in the array of `struct comedi_insn`, and sensible comedi instructions will have an `n` of at least 1.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 31, 2025 | Jul 31, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 14, 2025 | Jul 28, 2025 |
| Suse | — | Upgrade reiserfs-kmp-azureUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-syms-azureUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-alteraUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-azureUpgrade kernel-rt-develUpgrade dtb-armUpgrade kernel-sourceUpgrade dtb-lgUpgrade kernel-azure-optionalUpgrade dtb-xilinxUpgrade kernel-64kb-develUpgrade dtb-sprdUpgrade dlm-kmp-64kbUpgrade kernel-rtUpgrade kernel-source-vanillaUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade dtb-allwinnerUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-debugUpgrade dtb-exynosUpgrade dtb-caviumUpgrade kernel-symsUpgrade dtb-nvidiaUpgrade kernel-default-base-rebuildUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-source-azureUpgrade dtb-qcomUpgrade kernel-source-rtUpgrade ocfs2-kmp-rtUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade dtb-freescaleUpgrade dtb-apmUpgrade kselftests-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade kernel-docsUpgrade reiserfs-kmp-rtUpgrade kernel-syms-rtUpgrade dtb-amlogicUpgrade kernel-debug-vdsoUpgrade dtb-appleUpgrade kernel-zfcpdumpUpgrade kernel-64kb-optionalUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-macrosUpgrade dtb-socionextUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade dtb-amdUpgrade dtb-amazonUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-64kb | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidiaUpgrade linux-image-oem-20.04cUpgrade linux-image-raspi-5.15Upgrade linux-image-generic-6.14Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-6.14Upgrade linux-image-realtime-6.8.1Upgrade linux-image-intelUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oem-22.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-azure-5.15Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-6.14Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gke-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gcp-6.14Upgrade linux-image-azure-lts-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-kvm-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gcp-fipsUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-ibmUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-1102-azureUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-azureUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspi-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-ibm-5.15Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-aws-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-azure-fipsUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-ibm-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-azure-fips-5.15Upgrade linux-image-realtimeUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-azure-6.14Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-virtual-5.15Upgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-raspi-realtimeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-oem-6.14Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-5.15Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-generic-5.15Upgrade linux-image-xilinxUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gkeUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1097-gcp | Jul 31, 2025 | Jul 28, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Jul 28, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub