7 matches found
ROS-20260923-73-0027
The vulnerability of the comedibufmunge function in the drivers/comedi/comedibuf.c module of the Linux kernel is related to insufficient validation of input data during division by zero. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the comedi_buf_munge() function in the drivers/comedi/comedi_buf.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the comedibufmunge function in the drivers/comedi/comedibuf.c module of the Linux kernel is related to insufficient validation of input data during division by zero. Exploiting this vulnerability could allow an attacker to cause a system failure...
comedi: fix divide-by-zero in comedi_buf_munge()
...
CVE-2025-40106
In the Linux kernel, the following vulnerability has been resolved: comedi: fix divide-by-zero in comedibufmunge The comedibufmunge function performs a modulo operation async-mungechan %= async-cmd.chanlistlen without first checking if chanlistlen is zero. If a user program submits a command with...
CVE-2025-40106
In CVE-2025-40106, the Linux kernel’s comedi_buf_munge() could divide by zero when chanlist_len is zero, since it performed async->munge_chan %= async->cmd.chanlist_len without a prior check. The fix adds an explicit zero-check at the start of comedi_buf_munge(), mirrors existing checks for...
CVE-2025-40106
In the Linux kernel, the following vulnerability has been resolved: comedi: fix divide-by-zero in comedibufmunge The comedibufmunge function performs a modulo operation async-mungechan %= async-cmd.chanlistlen without first checking if chanlistlen is zero. If a user program submits a command with...
CVE-2025-40106: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: comedi: fix divide-by-zero in comedibufmunge The comedibufmunge function performs a modulo operation async-mungechan %= async-cmd.chanlistlen without first checking if chanlistlen is zero. If a user program submits a command with...