In the Linux kernel, the following vulnerability has been resolved:
comedi: das6402: Fix bit shift out of bounds
When checking for a supported IRQ number, the following test is used:
/* IRQs 2,3,5,6,7, 10,11,15 are valid for "enhanced" mode */
if ((1 << it->options[1]) & 0x8cec) {
However, it->options[i] is an unchecked int value from userspace, so
the shift amount could be negative or out of bounds. Fix the test by
requiring it->options[1] to be within bounds before proceeding with
the original test. Valid it->options[1] values that select the IRQ
will be in the range [1,15]. The value 0 explicitly disables the use of
interrupts.
[
{
"id": "CVE-2025-38482-14fe587f",
"target": {
"function": "das6402_attach",
"file": "drivers/comedi/drivers/das6402.c"
},
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 2221.0,
"function_hash": "44162754736718358299002306871509199463"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a18a42e77545afcacd6a2b8d9fc16191b87454df"
},
{
"id": "CVE-2025-38482-3a3dc1bc",
"target": {
"function": "das6402_attach",
"file": "drivers/comedi/drivers/das6402.c"
},
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 2251.0,
"function_hash": "90572648276192571831552806872724315251"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@70f2b28b5243df557f51c054c20058ae207baaac"
},
{
"id": "CVE-2025-38482-4424c2b0",
"target": {
"file": "drivers/comedi/drivers/das6402.c"
},
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"170178235233643043309055157074047331979",
"255699095230321917092308335915165095385",
"76659146151122221771616538876965640993",
"62870896602991082383205673795871488816"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3eab654f5d199ecd45403c6588cda63e491fcfca"
},
{
"id": "CVE-2025-38482-5020d583",
"target": {
"function": "das6402_attach",
"file": "drivers/comedi/drivers/das6402.c"
},
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 2251.0,
"function_hash": "90572648276192571831552806872724315251"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3eab654f5d199ecd45403c6588cda63e491fcfca"
},
{
"id": "CVE-2025-38482-5f953159",
"target": {
"function": "das6402_attach",
"file": "drivers/staging/comedi/drivers/das6402.c"
},
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 2221.0,
"function_hash": "44162754736718358299002306871509199463"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@de8da1063cce9234d55c8270d9bdf4cf84411c80"
},
{
"id": "CVE-2025-38482-683c4b66",
"target": {
"file": "drivers/comedi/drivers/das6402.c"
},
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"170178235233643043309055157074047331979",
"255699095230321917092308335915165095385",
"76659146151122221771616538876965640993",
"62870896602991082383205673795871488816"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8a3637027ceeba4ca5e500b23cb7d24c25592513"
},
{
"id": "CVE-2025-38482-69533c65",
"target": {
"file": "drivers/comedi/drivers/das6402.c"
},
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"170178235233643043309055157074047331979",
"255699095230321917092308335915165095385",
"76659146151122221771616538876965640993",
"62870896602991082383205673795871488816"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a18a42e77545afcacd6a2b8d9fc16191b87454df"
},
{
"id": "CVE-2025-38482-777ef82c",
"target": {
"function": "das6402_attach",
"file": "drivers/comedi/drivers/das6402.c"
},
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 2251.0,
"function_hash": "90572648276192571831552806872724315251"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4a3c18cde02e35aba87e0ad5672b3e1c72dda5a4"
},
{
"id": "CVE-2025-38482-8ea9a7fe",
"target": {
"file": "drivers/staging/comedi/drivers/das6402.c"
},
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"170178235233643043309055157074047331979",
"255699095230321917092308335915165095385",
"76659146151122221771616538876965640993",
"62870896602991082383205673795871488816"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a15e9c175f783298c4ee48146be6841335400406"
},
{
"id": "CVE-2025-38482-9a34474c",
"target": {
"file": "drivers/staging/comedi/drivers/das6402.c"
},
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"170178235233643043309055157074047331979",
"255699095230321917092308335915165095385",
"76659146151122221771616538876965640993",
"62870896602991082383205673795871488816"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@de8da1063cce9234d55c8270d9bdf4cf84411c80"
},
{
"id": "CVE-2025-38482-9ce714c1",
"target": {
"function": "das6402_attach",
"file": "drivers/staging/comedi/drivers/das6402.c"
},
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 2221.0,
"function_hash": "44162754736718358299002306871509199463"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a15e9c175f783298c4ee48146be6841335400406"
},
{
"id": "CVE-2025-38482-a8b6a35c",
"target": {
"file": "drivers/comedi/drivers/das6402.c"
},
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"170178235233643043309055157074047331979",
"255699095230321917092308335915165095385",
"76659146151122221771616538876965640993",
"62870896602991082383205673795871488816"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@73f34d609397805c20d6b2ef5c07a4cbf7c4d63a"
},
{
"id": "CVE-2025-38482-ad269418",
"target": {
"function": "das6402_attach",
"file": "drivers/comedi/drivers/das6402.c"
},
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 2221.0,
"function_hash": "44162754736718358299002306871509199463"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8a3637027ceeba4ca5e500b23cb7d24c25592513"
},
{
"id": "CVE-2025-38482-dc314be6",
"target": {
"file": "drivers/comedi/drivers/das6402.c"
},
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"170178235233643043309055157074047331979",
"255699095230321917092308335915165095385",
"76659146151122221771616538876965640993",
"62870896602991082383205673795871488816"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@70f2b28b5243df557f51c054c20058ae207baaac"
},
{
"id": "CVE-2025-38482-ef550049",
"target": {
"function": "das6402_attach",
"file": "drivers/comedi/drivers/das6402.c"
},
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 2221.0,
"function_hash": "44162754736718358299002306871509199463"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@73f34d609397805c20d6b2ef5c07a4cbf7c4d63a"
},
{
"id": "CVE-2025-38482-fa4dcf7d",
"target": {
"file": "drivers/comedi/drivers/das6402.c"
},
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"170178235233643043309055157074047331979",
"255699095230321917092308335915165095385",
"76659146151122221771616538876965640993",
"62870896602991082383205673795871488816"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4a3c18cde02e35aba87e0ad5672b3e1c72dda5a4"
}
]