Divide-by-Zero Vulnerability in Linux Kernel Affecting Comedi Driver

CVE-2025-40106

What is CVE-2025-40106?

A divide-by-zero vulnerability exists in the Linux kernel's comedi driver due to a missing check for zero in the chanlist_len parameter. When a user command sets chanlist_len to zero, the comedi_buf_munge() function attempts a modulo operation that leads to a divide-by-zero error in the interrupt handler. This oversight can result in kernel panics, potentially affecting system stability. The vulnerability has been addressed by implementing a check for zero chanlist_len, allowing the function to handle this edge case without proceeding to erroneous data processing.

References