CVE-2025-38482

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-38482
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38482.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-38482
Downstream
Related
Published
2025-07-28T11:21:47.026Z
Modified
2026-05-28T03:54:31.701574073Z
Summary
comedi: das6402: Fix bit shift out of bounds
Details

In the Linux kernel, the following vulnerability has been resolved:

comedi: das6402: Fix bit shift out of bounds

When checking for a supported IRQ number, the following test is used:

/* IRQs 2,3,5,6,7, 10,11,15 are valid for "enhanced" mode */
if ((1 << it->options[1]) & 0x8cec) {

However, it->options[i] is an unchecked int value from userspace, so the shift amount could be negative or out of bounds. Fix the test by requiring it->options[1] to be within bounds before proceeding with the original test. Valid it->options[1] values that select the IRQ will be in the range [1,15]. The value 0 explicitly disables the use of interrupts.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38482.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
79e5e6addbb18bf56075f0ff552094a28636dd03
Fixed
a15e9c175f783298c4ee48146be6841335400406
Fixed
de8da1063cce9234d55c8270d9bdf4cf84411c80
Fixed
73f34d609397805c20d6b2ef5c07a4cbf7c4d63a
Fixed
a18a42e77545afcacd6a2b8d9fc16191b87454df
Fixed
8a3637027ceeba4ca5e500b23cb7d24c25592513
Fixed
3eab654f5d199ecd45403c6588cda63e491fcfca
Fixed
4a3c18cde02e35aba87e0ad5672b3e1c72dda5a4
Fixed
70f2b28b5243df557f51c054c20058ae207baaac

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38482.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.15.0
Fixed
5.4.297
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.241
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.190
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.147
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.100
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.40
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.15.8

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38482.json"