CVE-2025-38481: comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
comedi: Fail COMEDIINSNLIST ioctl if ninsns is too large
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Configuration
Define MAX_INSNS as 65536, equal to MAX_SAMPLES, and make the COMEDI_INSNLIST ioctl fail with -EINVAL when the supplied n_insns value exceeds this limit.
Linux kernel comedi MAX_INSNS = 65536
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38481?
CVE-2025-38481 has been labeled with a medium severity due to its impact on the kernel's stability.
How do I fix CVE-2025-38481?
To fix CVE-2025-38481, update your Linux kernel to the latest version where the vulnerability has been patched.
What systems are affected by CVE-2025-38481?
CVE-2025-38481 affects various versions of the Linux kernel that utilize the COMEDI_INSNLIST ioctl.
What is the nature of the vulnerability in CVE-2025-38481?
CVE-2025-38481 involves improper handling of the `COMEDI_INSNLIST` ioctl, which can lead to a buffer allocation failure.
Is CVE-2025-38481 being actively exploited?
As of now, there is no public information indicating that CVE-2025-38481 is actively being exploited in the wild.