Riskcovery

CVE-2026-68089

iio: core: fix uninitialized data in debugfs

State
Published
Severity
Not scored
Published
Aug 10, 2026
Updated
Aug 17, 2026
Reserved
Jul 30, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: core: fix uninitialized data in debugfs

If *ppos is non-zero then simple_write_to_buffer() will not initialize the start of buf[]. Non zero values for *ppos aren't going to work anyway. Test for them at the start of the function and return -EINVAL.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 6d5dd486c715908b5a6ed02315a15ff044a91025 to before e166a8cfb28a3d0da260dd70cae274eb8c7cec8dAffected
  • 6d5dd486c715908b5a6ed02315a15ff044a91025 to before 89fbd3e32dffb6227f936a9578e6eb4632aa4580Affected
  • 6d5dd486c715908b5a6ed02315a15ff044a91025 to before ab92ed206d41fd171ebd37bc46360d9f2140d043Affected
LinuxLinux
  • 6.15Affected
  • before 6.15Not affected
  • 6.18.39 through 6.18.*Not affected
  • 7.1.4 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.