Riskcovery

CVE-2026-98668

iio: buffer: Ensure bounce buffer used for unaligned case is zeroed.

State
Published
Severity
Not scored
Published
Oct 18, 2026
Updated
Oct 30, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: buffer: Ensure bounce buffer used for unaligned case is zeroed.

iio_push_to_buffers_with_ts_unaligned() leaks uninitialized heap memory to userspace if the data passed in is not a multiple of 8 bytes and the timestamp is enabled. Specify __GFP_ZERO for the devm_krealloc() to ensure any extra space is cleared.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 95ec3fdf2b79eaff79e78688bbc2f7dbb98d68b6 to before b953b8d5e6f2d53e81faa0f3b42856cdf16fe563Affected
  • 95ec3fdf2b79eaff79e78688bbc2f7dbb98d68b6 to before b4f53cec8cc94b37601ce0bb2b272b6753beed98Affected
  • 95ec3fdf2b79eaff79e78688bbc2f7dbb98d68b6 to before b5c2f21f645e40c70fda2a4283e6f2a81e5cb9f2Affected
  • 95ec3fdf2b79eaff79e78688bbc2f7dbb98d68b6 to before b134ef820610bd873c9d59999d9824710964ce82Affected
  • 95ec3fdf2b79eaff79e78688bbc2f7dbb98d68b6 to before 3a87212b1a09a1fdd730ce5520f7b1fc0b488511Affected
  • 95ec3fdf2b79eaff79e78688bbc2f7dbb98d68b6 to before 5330036bc68d23672bfcc16c60c54701ae123083Affected
LinuxLinux
  • 5.16Affected
  • before 5.16Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.113 through 6.12.*Not affected
  • 6.18.56 through 6.18.*Not affected
  • 7.2.10 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.