In the Linux kernel, the following vulnerability has been resolved:
comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
The handling of the `COMEDI_INSNLIST` ioctl allocates a kernel buffer to hold the array of `struct comedi_insn`, getting the length from the `n_insns` member of the `struct comedi_insnlist` supplied by the user. The allocation will fail with a WARNING and a stack dump if it is too large.
Avoid that by failing with an `-EINVAL` error if the supplied `n_insns` value is unreasonable.
Define the limit on the `n_insns` value in the `MAX_INSNS` macro. Set this to the same value as `MAX_SAMPLES` (65536), which is the maximum allowed sum of the values of the member `n` in the array of `struct comedi_insn`, and sensible comedi instructions will have an `n` of at least 1.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 31, 2025 | Jul 31, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 14, 2025 | Jul 28, 2025 |
| Suse | — | Upgrade kernel-sourceUpgrade gfs2-kmp-defaultUpgrade dtb-mediatekUpgrade ocfs2-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade dlm-kmp-64kbUpgrade kernel-rtUpgrade kernel-source-vanillaUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade dtb-allwinnerUpgrade dtb-hisiliconUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-develUpgrade dtb-qcomUpgrade ocfs2-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-64kb-develUpgrade kernel-debugUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade kernel-rt-livepatchUpgrade dtb-caviumUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-azure-optionalUpgrade dtb-armUpgrade dtb-nvidiaUpgrade dtb-lgUpgrade kernel-rt-develUpgrade gfs2-kmp-azureUpgrade kernel-symsUpgrade dtb-alteraUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade dtb-amdUpgrade kernel-source-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dtb-appleUpgrade kernel-debug-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-obs-buildUpgrade reiserfs-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade dtb-amlogicUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade ocfs2-kmp-64kbUpgrade kernel-macrosUpgrade dtb-socionextUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-extraUpgrade kselftests-kmp-azureUpgrade kernel-azure-develUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade kernel-devel-azureUpgrade kernel-rt-optionalUpgrade kernel-default-extraUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade dtb-freescaleUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-azureUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-rt | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatency-5.15Upgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-realtimeUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-oem-6.14Upgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-generic-64k-6.14Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oracle-6.14Upgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.14.0-36-genericUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-kvmUpgrade linux-image-fips-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-oem-22.04bUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-xilinxUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-generic-6.8Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-azure-cvmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-aws-fips-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-awsUpgrade linux-image-gkeop-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-oem-20.04dUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azureUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-oem-22.04dUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-azure-lts-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gcp-6.14Upgrade linux-image-5.15.0-1097-awsUpgrade linux-image-realtime-6.8.1Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-aws-6.14Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-gke-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-oracle-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-oracle-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-intelUpgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-kvm-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1101-azureUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-gke-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-ibmUpgrade linux-image-genericUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-aws-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-gkeopUpgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-realtime-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-aws-64k-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-6.14Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspiUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-gke-5.15Upgrade linux-image-generic-6.14Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-generic-64k-5.15 | Jul 31, 2025 | Jul 28, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Jul 28, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub