Description
In the Linux kernel, the following vulnerability has been resolved:

comedi: comedi_parport: deal with premature interrupt

Syzbot reported a general protection fault in
`comedi_get_is_subdevice_running()`, which was called from the interrupt
handler `parport_interrupt()` in the "comedi_parport" driver, but it
does not currently have a C reproducer for the problem. It's
probably due to a premature interrupt for one of two reasons:

1. The driver sets up the interrupt handler before the comedi subdevices
used by the interrupt handler have been allocated, but does not
disable the interrupt in the parallel port's CTRL register first.
2. The driver uses a user-supplied I/O port base address which Syzbot
would have supplied, but it might not be backed by real parallel port
hardware.

Change the initialization order in the driver's comedi "attach" handler
(`parport_attach()`) so that the hardware registers are initialized
before the interrupt handler is requested. This should prevent
premature interrupts occurring for real hardware.

Also add a test to the interrupt handler to ensure the comedi device is
fully attached and return early if it isn't.
Published: 2026-08-10
Score: 4.4 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

In the Linux kernel, the comedi_parport driver can trigger a general protection fault when an interrupt occurs before the driver’s required subdevices are allocated. The interrupt handler accesses uninitialized state, causing a kernel crash. This produces a system‑wide denial of service. The weakness stems from improper initialization and a potential race condition in the driver code.

Affected Systems

All Linux kernel installations that compile the comedi_parport driver, regardless of distribution or kernel version, are vulnerable. Any system that has not yet applied the upstream fix may crash when a parallel port interrupt is triggered, either by real hardware or emulated input.

Risk and Exploitability

The CVSS score of 4.4 classifies this vulnerability as moderate. The EPSS score is less than 1%, and it is not listed in the CISA KEV catalog, indicating limited known exploitation. Based on the description, it is inferred that exploitation would likely require local privileged access or the ability to trigger a parallel port interrupt. Although no public exploits are known, the vulnerability can cause a system‑wide denial of service if the comedi_parport driver is loaded and a parallel hardware interrupt occurs.

Generated by OpenCVE AI on August 13, 2026 at 07:55 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the Linux kernel to the latest upstream release that includes the upstream patch to reorder initialization in the comedi_parport driver; if a custom kernel is used, recompile it with the updated source
  • If an immediate kernel upgrade is not possible, unload or blacklist the "comedi_parport" module so that it does not load during boot
  • If the system requires the comedi driver, verify that any user‑supplied I/O base addresses map to actual parallel‑port hardware and avoid configuring the driver with unbacked ports

Generated by OpenCVE AI on August 13, 2026 at 07:55 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4745-1 linux-6.12 security update
History

Wed, 19 Aug 2026 16:45:00 +0000


Wed, 12 Aug 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-824
References
Metrics threat_severity

None

cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate


Mon, 10 Aug 2026 12:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: comedi: comedi_parport: deal with premature interrupt Syzbot reported a general protection fault in `comedi_get_is_subdevice_running()`, which was called from the interrupt handler `parport_interrupt()` in the "comedi_parport" driver, but it does not currently have a C reproducer for the problem. It's probably due to a premature interrupt for one of two reasons: 1. The driver sets up the interrupt handler before the comedi subdevices used by the interrupt handler have been allocated, but does not disable the interrupt in the parallel port's CTRL register first. 2. The driver uses a user-supplied I/O port base address which Syzbot would have supplied, but it might not be backed by real parallel port hardware. Change the initialization order in the driver's comedi "attach" handler (`parport_attach()`) so that the hardware registers are initialized before the interrupt handler is requested. This should prevent premature interrupts occurring for real hardware. Also add a test to the interrupt handler to ensure the comedi device is fully attached and return early if it isn't.
Title comedi: comedi_parport: deal with premature interrupt
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-19T16:30:47.491Z

Reserved: 2026-07-30T09:28:09.373Z

Link: CVE-2026-68182

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-10T13:20:05.250

Modified: 2026-08-19T17:20:34.343

Link: CVE-2026-68182

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-08-10T11:59:53Z

Links: CVE-2026-68182 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-13T08:00:04Z

Weaknesses
  • CWE-824

    Access of Uninitialized Pointer