CVE-2026-63965

A flaw was found in the Linux kernel's bmp280 pressure sensor driver. The bmp580triggerhandler function fails to initialize a stack-allocated buffer, which can lead to two bytes of uninitialized stack memory being exposed to userspace. This information disclosure vulnerability could allow a local...

CVE-2026-63965 iio: pressure: bmp280: fix stack leak in bmp580 trigger handler

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: bmp280: fix stack leak in bmp580 trigger handler bmp580triggerhandler declares its scan buffer on the stack without an initializer and then memcpys 3 bytes of 24-bit sensor data into each 4-byte le32 field. The hig...