CVE-2025-40106
In the Linux kernel, the following vulnerability has been resolved: comedi: fix divide-by-zero in comedi_buf_munge() The comedi_buf_munge() function performs a modulo operation `async->munge_chan %= async->cmd.chanlist_len` without first checking if chanlist_len is zero. If a user program submits a command with chanlist_len set to zero, this causes a divide-by-zero error when the device processes data in the interrupt handler path. Add a check for zero chanlist_len at the beginning of the function, similar to the existing checks for !map and CMDF_RAWDATA flag. When chanlist_len is zero, update munge_count and return early, indicating the data was handled without munging. This prevents potential kernel panics from malformed user commands.
Affected versions
Linux kernel versions
2.6.29
and later are affected. Fixed in
5.4.301,
5.10.246,
5.15.196,
6.1.158,
6.6.115,
6.12.56,
6.17.6,
6.18
and their respective stable series.
References
The following references provide additional information about CVE-2025-40106 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.
-
PatchKernel patch commithttps://git.kernel.org/stable/c/2670932f2465793fea1ef073e40883e8390fa4d9
-
PatchKernel patch commithttps://git.kernel.org/stable/c/4ffea48c69cb2b96a281cb7e5e42d706996631db
-
PatchKernel patch commithttps://git.kernel.org/stable/c/55520f65fd447e04099a2c44185453c18ea73b7e
Frequently asked questions
-
What is CVE-2025-40106?
CVE-2025-40106 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 2.6.29 onward and has been patched in 5.4.301, 5.10.246, 5.15.196 and others. CVE-2025-40106 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2025-40106?
Yes — CVE-2025-40106 has been patched. Fixed versions include 5.4.301, 5.10.246, 5.15.196 and others. If you are running Linux kernel 2.6.29 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2025-40106 actively exploited?
No — CVE-2025-40106 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.