CVE-2025-38482

comedi: das6402: Fix bit shift out of bounds

State: Published
Severity: Not scored
Published: Jul 28, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

comedi: das6402: Fix bit shift out of bounds

When checking for a supported IRQ number, the following test is used:

/* IRQs 2,3,5,6,7, 10,11,15 are valid for "enhanced" mode */ if ((1 << it->options[1]) & 0x8cec) {

However, `it->options[i]` is an unchecked `int` value from userspace, so the shift amount could be negative or out of bounds. Fix the test by requiring `it->options[1]` to be within bounds before proceeding with the original test. Valid `it->options[1]` values that select the IRQ will be in the range [1,15]. The value 0 explicitly disables the use of interrupts.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	79e5e6addbb18bf56075f0ff552094a28636dd03 to before a15e9c175f783298c4ee48146be6841335400406Affected 79e5e6addbb18bf56075f0ff552094a28636dd03 to before de8da1063cce9234d55c8270d9bdf4cf84411c80Affected 79e5e6addbb18bf56075f0ff552094a28636dd03 to before 73f34d609397805c20d6b2ef5c07a4cbf7c4d63aAffected 79e5e6addbb18bf56075f0ff552094a28636dd03 to before a18a42e77545afcacd6a2b8d9fc16191b87454dfAffected 79e5e6addbb18bf56075f0ff552094a28636dd03 to before 8a3637027ceeba4ca5e500b23cb7d24c25592513Affected 79e5e6addbb18bf56075f0ff552094a28636dd03 to before 3eab654f5d199ecd45403c6588cda63e491fcfcaAffected 79e5e6addbb18bf56075f0ff552094a28636dd03 to before 4a3c18cde02e35aba87e0ad5672b3e1c72dda5a4Affected 79e5e6addbb18bf56075f0ff552094a28636dd03 to before 70f2b28b5243df557f51c054c20058ae207baaacAffected
LinuxLinux	3.15Affected before 3.15Not affected 5.4.297 through 5.4.Not affected 5.10.241 through 5.10.Not affected 5.15.190 through 5.15.Not affected 6.1.147 through 6.1.Not affected 6.6.100 through 6.6.Not affected 6.12.40 through 6.12.Not affected 6.15.8 through 6.15.*Not affected 6.16 and laterNot affected

Product

Versions

LinuxLinux

79e5e6addbb18bf56075f0ff552094a28636dd03 to before a15e9c175f783298c4ee48146be6841335400406Affected
79e5e6addbb18bf56075f0ff552094a28636dd03 to before de8da1063cce9234d55c8270d9bdf4cf84411c80Affected
79e5e6addbb18bf56075f0ff552094a28636dd03 to before 73f34d609397805c20d6b2ef5c07a4cbf7c4d63aAffected
79e5e6addbb18bf56075f0ff552094a28636dd03 to before a18a42e77545afcacd6a2b8d9fc16191b87454dfAffected
79e5e6addbb18bf56075f0ff552094a28636dd03 to before 8a3637027ceeba4ca5e500b23cb7d24c25592513Affected
79e5e6addbb18bf56075f0ff552094a28636dd03 to before 3eab654f5d199ecd45403c6588cda63e491fcfcaAffected
79e5e6addbb18bf56075f0ff552094a28636dd03 to before 4a3c18cde02e35aba87e0ad5672b3e1c72dda5a4Affected
79e5e6addbb18bf56075f0ff552094a28636dd03 to before 70f2b28b5243df557f51c054c20058ae207baaacAffected

LinuxLinux

3.15Affected
before 3.15Not affected
5.4.297 through 5.4.*Not affected
5.10.241 through 5.10.*Not affected
5.15.190 through 5.15.*Not affected
6.1.147 through 6.1.*Not affected
6.6.100 through 6.6.*Not affected
6.12.40 through 6.12.*Not affected
6.15.8 through 6.15.*Not affected
6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.