BELL-CVE-2026-68089

Bulletin has no description...

CVE-2026-68089

The CVE-2026-68089 entry concerns the Linux kernel iio core debugfs handling. It documents a vulnerability where uninitialized data could be exposed when *ppos is non-zero, because simple_write_to_buffer() would not initialize buf[]. The fix adds a test for non-zero *ppos at the start of the affe...