Security tracker / CVE-2025-39686

CVE-2025-39686

comedi: Make insn_rw_emulate_bits() do insn->n samples

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in ed9eccbe8970 ("Staging: add comedi core"). Vulnerable versions:
 carnil> 2.6.29.

Bugs

Status

Branch	Status
upstream	released (6.17-rc3) [7afba9221f70d4cbce0f417c558879cba0eb5e66]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.16-upstream-stable	released (6.16.4) [dc0a2f142d655700db43de90cb6abf141b73d908]
6.12-upstream-stable	released (6.12.44) [92352ed2f9ac422181e381c2430c2d0dfb46faa0]
6.6-upstream-stable	released (6.6.103) [842f307a1d115b24f2bcb2415c4e344f11f55930]
6.1-upstream-stable	released (6.1.149) [ae8bc1f07bcb31b8636420e03d1f9c3df6219a2b]
5.10-upstream-stable	needed
sid	released (6.16.5-1)
6.12-trixie-security	released (6.12.48-1)
6.1-bookworm-security	released (6.1.153-1)
5.10-bullseye-security	needed