Description
In the Linux kernel, the following vulnerability has been resolved: comedi: pcl812: Fix bit shift out of bounds When checking for a supported IRQ number, the following test is used: if ((1 << it->options[1]) & board->irq_bits) { However, `it->options[i]` is an unchecked `int` value from userspace, so the shift amount could be negative or out of bounds. Fix the test by requiring `it->options[1]` to be within bounds before proceeding with the original test. Valid `it->options[1]` values that select the IRQ will be in the range [1,15]. The value 0 explicitly disables the use of interrupts.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
fcdb427bc7cf5e9e5d7280cf09c08dec49b49432 to < 374d9b3eb4b08407997ef1fce96119d31e0c0bc4affectedfcdb427bc7cf5e9e5d7280cf09c08dec49b49432 to < 0489c30d080f07cc7f09d04de723d8c2ccdb61efaffectedfcdb427bc7cf5e9e5d7280cf09c08dec49b49432 to < 29ef03e5b84431171d6b77b822985b54bc44b793affectedfcdb427bc7cf5e9e5d7280cf09c08dec49b49432 to < 5bfa301e1e59a9b1a7b62a800b54852337c97416affectedfcdb427bc7cf5e9e5d7280cf09c08dec49b49432 to < 7e470d8efd10725b189ca8951973a8425932398aaffectedfcdb427bc7cf5e9e5d7280cf09c08dec49b49432 to < a27e27eee313fe1c450b6af1e80e64412546cab4affectedfcdb427bc7cf5e9e5d7280cf09c08dec49b49432 to < 16c173abee315953fd17a279352fec4a1faee862affectedfcdb427bc7cf5e9e5d7280cf09c08dec49b49432 to < b14b076ce593f72585412fc7fd3747e03a5e3632affected
Linux Linux
Default version status: affected
2.6.30affected0 to < 2.6.30unaffected5.4.297 to ≤ 5.4.*unaffected5.10.241 to ≤ 5.10.*unaffected5.15.190 to ≤ 5.15.*unaffected6.1.147 to ≤ 6.1.*unaffected6.6.100 to ≤ 6.6.*unaffected6.12.40 to ≤ 6.12.*unaffected6.15.8 to ≤ 6.15.*unaffected6.16 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/374d9b3eb4b08407997ef1fce96119d31e0c0bc4 ↗
- https://git.kernel.org/stable/c/0489c30d080f07cc7f09d04de723d8c2ccdb61ef ↗
- https://git.kernel.org/stable/c/29ef03e5b84431171d6b77b822985b54bc44b793 ↗
- https://git.kernel.org/stable/c/5bfa301e1e59a9b1a7b62a800b54852337c97416 ↗
- https://git.kernel.org/stable/c/7e470d8efd10725b189ca8951973a8425932398a ↗
- https://git.kernel.org/stable/c/a27e27eee313fe1c450b6af1e80e64412546cab4 ↗
- https://git.kernel.org/stable/c/16c173abee315953fd17a279352fec4a1faee862 ↗
- https://git.kernel.org/stable/c/b14b076ce593f72585412fc7fd3747e03a5e3632 ↗
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html ↗
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html ↗