Riskcovery

CVE-2025-22082

iio: backend: make sure to NULL terminate stack buffer

State
Published
Severity
Not scored
Published
Apr 16, 2025
Updated
May 11, 2026
Reserved
Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: backend: make sure to NULL terminate stack buffer

Make sure to NULL terminate the buffer in iio_backend_debugfs_write_reg() before passing it to sscanf(). It is a stack variable so we should not assume it will 0 initialized.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • cdf01e0809a4c6c7877ea52401c2a6679df7aed6 to before df3892e5e861c43d5612728ed259634675b8a71fAffected
  • cdf01e0809a4c6c7877ea52401c2a6679df7aed6 to before 04271a4d2740f98bbe36f82cd3d74677a839d1ebAffected
  • cdf01e0809a4c6c7877ea52401c2a6679df7aed6 to before fd791c81f410ab1c554686a6f486dc7a176dfe35Affected
  • cdf01e0809a4c6c7877ea52401c2a6679df7aed6 to before 035b4989211dc1c8626e186d655ae8ca5141bb73Affected
LinuxLinux
  • 6.12Affected
  • before 6.12Not affected
  • 6.12.23 through 6.12.*Not affected
  • 6.13.11 through 6.13.*Not affected
  • 6.14.2 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.