https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 16:27:35 +0000 https://vulnerability.circl.lu/vuln/cve-2025-40106 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>comedi: fix divide-by-zero in comedi_buf_munge()</p> <p>The comedi_buf_munge() function performs a modulo operation `async-&gt;munge_chan %= async-&gt;cmd.chanlist_len` without first checking if chanlist_len is zero. If a user program submits a command with chanlist_len set to zero, this causes a divide-by-zero error when the device processes data in the interrupt handler path.</p> <p>Add a check for zero chanlist_len at the beginning of the function, similar to the existing checks for !map and CMDF_RAWDATA flag. When chanlist_len is zero, update munge_count and return early, indicating the data was handled without munging.</p> <p>This prevents potential kernel panics from malformed user commands.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>comedi: fix divide-by-zero in comedi_buf_munge()</p> <p>The comedi_buf_munge() function performs a modulo operation `async-&gt;munge_chan %= async-&gt;cmd.chanlist_len` without first checking if chanlist_len is zero. If a user program submits a command with chanlist_len set to zero, this causes a divide-by-zero error when the device processes data in the interrupt handler path.</p> <p>Add a check for zero chanlist_len at the beginning of the function, similar to the existing checks for !map and CMDF_RAWDATA flag. When chanlist_len is zero, update munge_count and return early, indicating the data was handled without munging.</p> <p>This prevents potential kernel panics from malformed user commands.</p> https://vulnerability.circl.lu/vuln/cve-2025-40106