In the Linux kernel, the following vulnerability has been resolved:
comedi: aio_iiro_16: Fix bit shift out of bounds
When checking for a supported IRQ number, the following test is used:
if ((1 << it->options[1]) & 0xdcfc) {
However, `it->options[i]` is an unchecked `int` value from userspace, so the shift amount could be negative or out of bounds. Fix the test by requiring `it->options[1]` to be within bounds before proceeding with the original test. Valid `it->options[1]` values that select the IRQ will be in the range [1,15]. The value 0 explicitly disables the use of interrupts.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Aug 18, 2025 | Aug 18, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 14, 2025 | Aug 16, 2025 |
| Suse | — | Upgrade dtb-apmUpgrade dtb-exynosUpgrade kernel-azure-optionalUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-default-vdsoUpgrade dtb-armUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade dtb-rockchipUpgrade dlm-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-obs-qaUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-rtUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-source-rtUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-azureUpgrade dtb-lgUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade dtb-alteraUpgrade kernel-kvmsmallUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-docsUpgrade cluster-md-kmp-64kbUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade gfs2-kmp-64kbUpgrade kernel-develUpgrade kernel-default-develUpgrade dtb-amazonUpgrade dlm-kmp-azureUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade dtb-freescaleUpgrade kselftests-kmp-defaultUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-symsUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade kernel-debugUpgrade kernel-64kbUpgrade dtb-appleUpgrade reiserfs-kmp-rtUpgrade dtb-socionextUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-default-livepatch-develUpgrade kernel-azure-extraUpgrade dlm-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade kernel-devel-rtUpgrade kernel-default-optional | Dec 5, 2025 | Sep 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.14.0-36-genericUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-aws-6.14Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspi-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-awsUpgrade linux-image-aws-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-5.15Upgrade linux-image-virtual-6.14Upgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-oracleUpgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-realtime-6.14Upgrade linux-image-aws-fips-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-5.15.0-1097-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-oracle-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-realtimeUpgrade linux-image-aws-64k-6.14Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-6.14Upgrade linux-image-generic-64k-6.14Upgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-generic-6.14Upgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-gcp-6.14Upgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-kvmUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gkeop-6.8Upgrade linux-image-intelUpgrade linux-image-oem-20.04bUpgrade linux-image-gke-5.15Upgrade linux-image-xilinxUpgrade linux-image-raspiUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi-6.14Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-kvm-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-azureUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-6.14Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-genericUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-nvidia-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-nvidiaUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-gke-64kUpgrade linux-image-gke-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-5.15.0-1094-oracle | Nov 25, 2025 | Nov 21, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Aug 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub