PT-2025-44599 · Linux+3 · Linux Kernel+3
Published
2025-10-22
·
Updated
2026-05-26
·
CVE-2025-40106
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The
comedi buf munge() function in the Linux kernel is susceptible to a divide-by-zero error. This occurs when the function performs a modulo operation (async->munge chan %= async->cmd.chanlist len) without verifying if chanlist len is zero. If a user program submits a command with chanlist len set to zero, a divide-by-zero error arises during data processing in the interrupt handler. This can lead to kernel panics from malformed user commands. The function attempts to process data without checking if chanlist len is zero, potentially causing a system crash.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Divide By Zero
Improper Resource Release
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Ubuntu