CVE-2025-40106 — Linux vulnerability
55 documents7 sources
Severity
7.8HIGHOSV
OSV5.5OSV3.2
No vectorEPSS
0.1%
top 81.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 31
Latest updateApr 13
Description
In the Linux kernel, the following vulnerability has been resolved:
comedi: fix divide-by-zero in comedi_buf_munge()
The comedi_buf_munge() function performs a modulo operation
`async->munge_chan %= async->cmd.chanlist_len` without first
checking if chanlist_len is zero. If a user program submits a command with
chanlist_len set to zero, this causes a divide-by-zero error when the device
processes data in the interrupt handler path.
Add a check for zero chanlist_len at the beginning of the
fun…
Affected Packages7 packages
▶CVEListV5linux/linuxed9eccbe8970f6eedc1b978c157caf1251a896d4 — 4ffea48c69cb2b96a281cb7e5e42d706996631db+8