CVE-2025-38483

comedi: das16m1: Fix bit shift out of bounds

State: Published
Severity: Not scored
Published: Jul 28, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

comedi: das16m1: Fix bit shift out of bounds

When checking for a supported IRQ number, the following test is used:

/* only irqs 2, 3, 4, 5, 6, 7, 10, 11, 12, 14, and 15 are valid */ if ((1 << it->options[1]) & 0xdcfc) {

However, `it->options[i]` is an unchecked `int` value from userspace, so the shift amount could be negative or out of bounds. Fix the test by requiring `it->options[1]` to be within bounds before proceeding with the original test.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	729988507680b2ce934bce61d9ce0ea7b235914c to before 539bdff832adac9ea653859fa0b6bc62e743329cAffected 729988507680b2ce934bce61d9ce0ea7b235914c to before d1291c69f46d6572b2cf75960dd8975d7ab2176bAffected 729988507680b2ce934bce61d9ce0ea7b235914c to before b3c95fa508e5dc3da60520eea92a5241095ceef1Affected 729988507680b2ce934bce61d9ce0ea7b235914c to before 65c03e6fc524eb2868abedffd8a4613d78abc288Affected 729988507680b2ce934bce61d9ce0ea7b235914c to before adb7df8a8f9d788423e161b779764527dd3ec2d0Affected 729988507680b2ce934bce61d9ce0ea7b235914c to before 076b13ee60eb01ed0d140ef261f95534562a3077Affected 729988507680b2ce934bce61d9ce0ea7b235914c to before f211572818ed5bec2b3f5d4e0719ef8699b3c269Affected 729988507680b2ce934bce61d9ce0ea7b235914c to before ed93c6f68a3be06e4e0c331c6e751f462dee3932Affected
LinuxLinux	3.14Affected before 3.14Not affected 5.4.297 through 5.4.Not affected 5.10.241 through 5.10.Not affected 5.15.190 through 5.15.Not affected 6.1.147 through 6.1.Not affected 6.6.100 through 6.6.Not affected 6.12.40 through 6.12.Not affected 6.15.8 through 6.15.*Not affected 6.16 and laterNot affected

Product

Versions

LinuxLinux

729988507680b2ce934bce61d9ce0ea7b235914c to before 539bdff832adac9ea653859fa0b6bc62e743329cAffected
729988507680b2ce934bce61d9ce0ea7b235914c to before d1291c69f46d6572b2cf75960dd8975d7ab2176bAffected
729988507680b2ce934bce61d9ce0ea7b235914c to before b3c95fa508e5dc3da60520eea92a5241095ceef1Affected
729988507680b2ce934bce61d9ce0ea7b235914c to before 65c03e6fc524eb2868abedffd8a4613d78abc288Affected
729988507680b2ce934bce61d9ce0ea7b235914c to before adb7df8a8f9d788423e161b779764527dd3ec2d0Affected
729988507680b2ce934bce61d9ce0ea7b235914c to before 076b13ee60eb01ed0d140ef261f95534562a3077Affected
729988507680b2ce934bce61d9ce0ea7b235914c to before f211572818ed5bec2b3f5d4e0719ef8699b3c269Affected
729988507680b2ce934bce61d9ce0ea7b235914c to before ed93c6f68a3be06e4e0c331c6e751f462dee3932Affected

LinuxLinux

3.14Affected
before 3.14Not affected
5.4.297 through 5.4.*Not affected
5.10.241 through 5.10.*Not affected
5.15.190 through 5.15.*Not affected
6.1.147 through 6.1.*Not affected
6.6.100 through 6.6.*Not affected
6.12.40 through 6.12.*Not affected
6.15.8 through 6.15.*Not affected
6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.