CVE-2025-38482

{"id": "CVE-2025-38482", "cveTags": [], "metrics": {}, "published": "2025-07-28T12:15:30.117", "references": [{"url": "https://git.kernel.org/stable/c/3eab654f5d199ecd45403c6588cda63e491fcfca", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/4a3c18cde02e35aba87e0ad5672b3e1c72dda5a4", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/70f2b28b5243df557f51c054c20058ae207baaac", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/8a3637027ceeba4ca5e500b23cb7d24c25592513", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/a18a42e77545afcacd6a2b8d9fc16191b87454df", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Awaiting Analysis", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncomedi: das6402: Fix bit shift out of bounds\n\nWhen checking for a supported IRQ number, the following test is used:\n\n\t/* IRQs 2,3,5,6,7, 10,11,15 are valid for \"enhanced\" mode */\n\tif ((1 << it->options[1]) & 0x8cec) {\n\nHowever, `it->options[i]` is an unchecked `int` value from userspace, so\nthe shift amount could be negative or out of bounds. Fix the test by\nrequiring `it->options[1]` to be within bounds before proceeding with\nthe original test. Valid `it->options[1]` values that select the IRQ\nwill be in the range [1,15]. The value 0 explicitly disables the use of\ninterrupts."}, {"lang": "es", "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: comedi: das6402: Corregir desplazamiento de bits fuera de los l\u00edmites Al comprobar un n\u00famero de IRQ compatible, se utiliza la siguiente prueba: /* Las IRQ 2, 3, 5, 6, 7, 10, 11, 15 son v\u00e1lidas para el modo \"enhanced\" */ if ((1 &lt;&lt; it-&gt;options[1]) &amp; 0x8cec) { Sin embargo, `it-&gt;options[i]` es un valor `int` sin comprobar del espacio de usuario, por lo que la cantidad de desplazamiento podr\u00eda ser negativa o estar fuera de los l\u00edmites. Corrija la prueba exigiendo que `it-&gt;options[1]` est\u00e9 dentro de los l\u00edmites antes de continuar con la prueba original. Los valores v\u00e1lidos de `it-&gt;options[1]` que seleccionan la IRQ estar\u00e1n en el rango [1, 15]. El valor 0 deshabilita expl\u00edcitamente el uso de interrupciones."}], "lastModified": "2025-07-29T14:14:29.590", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}