vulnti.work

In the Linux kernel, the following vulnerability has been resolved: comedi: Fix initialization of data for instructions that write to subdevice Some Comedi subdevice instruction handlers are known …

高危 CVSS 7.8
CVECVE-2025-38478
首次发现2026-07-30 16:16 UTC
披露时间2025-07-28 12:15 UTC
最后更新2026-07-30 16:16 UTC
通道状态auto

摘要

In the Linux kernel, the following vulnerability has been resolved: comedi: Fix initialization of data for instructions that write to subdevice Some Comedi subdevice instruction handlers are known to access instruction data elements beyond the first `insn->n` elements in some cases. The `do_insn_ioctl()` and `do_insnlist_ioctl()` functions allocate at least `MIN_SAMPLES` (16) data elements to deal with this, but they do not initialize all of that. For Comedi instruction codes that write to …

中文摘要建设中,暂以英文摘要呈现(DR-003 v2)。

深度研判 · 自动通道

该漏洞尚未生成深度研判报告(DR-003 v2 AI pipeline 建设中)。

受影响产品

  • :
  • :

数据来源

  • NVD DATABASE

原始链接

时间线

  1. nvd_ingest NVD