CVE-2025-38530

Summary

In the Linux kernel, the following vulnerability has been resolved:

comedi: pcl812: Fix bit shift out of bounds

When checking for a supported IRQ number, the following test is used:

if ((1 << it->options[1]) & board->irq_bits) {

However, it->options[i] is an unchecked int value from userspace, so the shift amount could be negative or out of bounds. Fix the test by requiring it->options[1] to be within bounds before proceeding with the original test. Valid it->options[1] values that select the IRQ will be in the range [1,15]. The value 0 explicitly disables the use of interrupts.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxfcdb427bc7cf5e9e5d7280cf09c08dec49b49432 < 374d9b3eb4b08407997ef1fce96119d31e0c0bc4affected
LinuxLinuxfcdb427bc7cf5e9e5d7280cf09c08dec49b49432 < 0489c30d080f07cc7f09d04de723d8c2ccdb61efaffected
LinuxLinuxfcdb427bc7cf5e9e5d7280cf09c08dec49b49432 < 29ef03e5b84431171d6b77b822985b54bc44b793affected
LinuxLinuxfcdb427bc7cf5e9e5d7280cf09c08dec49b49432 < 5bfa301e1e59a9b1a7b62a800b54852337c97416affected
LinuxLinuxfcdb427bc7cf5e9e5d7280cf09c08dec49b49432 < 7e470d8efd10725b189ca8951973a8425932398aaffected
LinuxLinuxfcdb427bc7cf5e9e5d7280cf09c08dec49b49432 < a27e27eee313fe1c450b6af1e80e64412546cab4affected
LinuxLinuxfcdb427bc7cf5e9e5d7280cf09c08dec49b49432 < 16c173abee315953fd17a279352fec4a1faee862affected
LinuxLinuxfcdb427bc7cf5e9e5d7280cf09c08dec49b49432 < b14b076ce593f72585412fc7fd3747e03a5e3632affected
LinuxLinux2.6.30affected
LinuxLinux0 < 2.6.30unaffected
LinuxLinux5.4.297 <= 5.4.*unaffected
LinuxLinux5.10.241 <= 5.10.*unaffected
LinuxLinux5.15.190 <= 5.15.*unaffected
LinuxLinux6.1.147 <= 6.1.*unaffected
LinuxLinux6.6.100 <= 6.6.*unaffected
LinuxLinux6.12.40 <= 6.12.*unaffected
LinuxLinux6.15.8 <= 6.15.*unaffected
LinuxLinux6.16 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

References