Riskcovery

CVE-2024-57905

iio: adc: ti-ads1119: fix information leak in triggered buffer

State
Published
Severity
7.1 High
Published
Jan 19, 2025
Updated
May 11, 2026
Reserved
Jan 19, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: adc: ti-ads1119: fix information leak in triggered buffer

The 'scan' local struct is used to push data to user space from a triggered buffer, but it has a hole between the sample (unsigned int) and the timestamp. This hole is never initialized.

Initialize the struct to zero before using it to avoid pushing uninitialized information to userspace.

Scores

CVSSScoreVectorSource
3.17.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HCISA-ADP

Weaknesses

  • CWE-908 Use of Uninitialized Resource

Affected Products

ProductVersions
LinuxLinux
  • a9306887eba41c5fe7232727a8147da3d3c4f83c to before 2f1687cca911a2f294313c762e0646cd9e7be8ccAffected
  • a9306887eba41c5fe7232727a8147da3d3c4f83c to before 75f339d3ecd38cb1ce05357d647189d4a7f7ed08Affected
LinuxLinux
  • 6.11Affected
  • before 6.11Not affected
  • 6.12.10 through 6.12.*Not affected
  • 6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.