CVE-2025-38530

Updated: 2026-02-08 04:36:57.927113

Description:

In the Linux kernel, the following vulnerability has been resolved: comedi: pcl812: Fix bit shift out of bounds When checking for a supported IRQ number, the following test is used: if ((1 << it->options[1]) & board->irq_bits) { However, `it->options[i]` is an unchecked `int` value from userspace, so the shift amount could be negative or out of bounds. Fix the test by requiring `it->options[1]` to be within bounds before proceeding with the original test. Valid `it->options[1]` values that select the IRQ will be in the range [1,15]. The value 0 explicitly disables the use of interrupts.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x HIGH 7.1

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

RHEL 7 ELS kernel 3.10.0 7.1 HIGH Needs Triage 2026-01-08 07:33:42
TuxCare 9.6 ESU kernel 5.14.0 7.1 HIGH Not Vulnerable 2026-01-12 17:45:34
Ubuntu 16.04 ELS linux-hwe 4.15.0 7.1 HIGH Needs Triage 2026-01-08 06:32:41
Ubuntu 16.04 ELS linux 4.4.0 7.1 HIGH Needs Triage 2026-01-08 06:45:41
Ubuntu 18.04 ELS linux 4.15.0 7.1 HIGH Needs Triage 2026-01-08 06:45:40
Ubuntu 20.04 ELS linux 5.4.0 7.1 HIGH In Testing 2026-02-05 13:17:47
Total: 16