CVE-2025-38482

Summary

In the Linux kernel, the following vulnerability has been resolved:

comedi: das6402: Fix bit shift out of bounds

When checking for a supported IRQ number, the following test is used:

/* IRQs 2,3,5,6,7, 10,11,15 are valid for "enhanced" mode */
if ((1 << it->options[1]) & 0x8cec) {

However, it->options[i] is an unchecked int value from userspace, so the shift amount could be negative or out of bounds. Fix the test by requiring it->options[1] to be within bounds before proceeding with the original test. Valid it->options[1] values that select the IRQ will be in the range [1,15]. The value 0 explicitly disables the use of interrupts.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux79e5e6addbb18bf56075f0ff552094a28636dd03 < a15e9c175f783298c4ee48146be6841335400406affected
LinuxLinux79e5e6addbb18bf56075f0ff552094a28636dd03 < de8da1063cce9234d55c8270d9bdf4cf84411c80affected
LinuxLinux79e5e6addbb18bf56075f0ff552094a28636dd03 < 73f34d609397805c20d6b2ef5c07a4cbf7c4d63aaffected
LinuxLinux79e5e6addbb18bf56075f0ff552094a28636dd03 < a18a42e77545afcacd6a2b8d9fc16191b87454dfaffected
LinuxLinux79e5e6addbb18bf56075f0ff552094a28636dd03 < 8a3637027ceeba4ca5e500b23cb7d24c25592513affected
LinuxLinux79e5e6addbb18bf56075f0ff552094a28636dd03 < 3eab654f5d199ecd45403c6588cda63e491fcfcaaffected
LinuxLinux79e5e6addbb18bf56075f0ff552094a28636dd03 < 4a3c18cde02e35aba87e0ad5672b3e1c72dda5a4affected
LinuxLinux79e5e6addbb18bf56075f0ff552094a28636dd03 < 70f2b28b5243df557f51c054c20058ae207baaacaffected
LinuxLinux3.15affected
LinuxLinux0 < 3.15unaffected
LinuxLinux5.4.297 <= 5.4.*unaffected
LinuxLinux5.10.241 <= 5.10.*unaffected
LinuxLinux5.15.190 <= 5.15.*unaffected
LinuxLinux6.1.147 <= 6.1.*unaffected
LinuxLinux6.6.100 <= 6.6.*unaffected
LinuxLinux6.12.40 <= 6.12.*unaffected
LinuxLinux6.15.8 <= 6.15.*unaffected
LinuxLinux6.16 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

References