CVE-2025-40106

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The comedi buf munge() function in the Linux kernel is susceptible to a divide-by-zero error. This occurs when the function performs a modulo operation (async->munge chan %= async->cmd.chanlist len) without verifying if chanlist len is zero. If a user program submits a command with chanlist len set to zero, a divide-by-zero error arises during data processing in the interrupt handler. This can lead to kernel panics from malformed user commands. The function attempts to process data without checking if chanlist len is zero, potentially causing a system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.