CVE-2024-57912 iio: pressure: zpa2326: fix information leak in triggered buffer

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: zpa2326: fix information leak in triggered buffer The 'sample' local struct is used to push data to user space from a triggered buffer, but it has a hole between the temperature and the timestamp u32 pressure, u16...

CVE-2024-57912

CVE-2024-57912 affects the Linux kernel iio: pressure: zpa2326 path. The issue stems from a local-triggered buffer where a sample struct (u32 pressure, u16 temperature, gap, u64 timestamp) contains an uninitialized hole between temperature and timestamp, risking information leakage to userspace. ...

CVE-2024-57910 iio: light: vcnl4035: fix information leak in triggered buffer

In the Linux kernel, the following vulnerability has been resolved: iio: light: vcnl4035: fix information leak in triggered buffer The 'buffer' local array is used to push data to userspace from a triggered buffer, but it does not set an initial value for the single data element, which is an u16...

CVE-2024-57911 iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer

In the Linux kernel, the following vulnerability has been resolved: iio: dummy: iiosimplydummybuffer: fix information leak in triggered buffer The 'data' array is allocated via kmalloc and it is used to push data to user space from a triggered buffer, but it does not set values for inactive...

CVE-2024-57911

In CVE-2024-57911, a Linux kernel vulnerability in iio: dummy caused potential information leakage via a triggered buffer. The data buffer allocated with kmalloc() was not initialized for inactive channels, risking uninitialized data being pushed to userspace. The root cause is that iio_for_each_...

CVE-2024-57908

CVE-2024-57908 affects the Linux kernel’s IIO KMX61 driver (iio: imu: kmx61). The vulnerability arises from using a local buffer to push data to userspace from a triggered buffer without initializing inactive channels, potentially leaking information. The documented fix is to initialize the buffe...

CVE-2024-57905

In CVE-2024-57905, Linux kernel iio: adc: ti-ads1119 is fixed: the scan path pushed data from a triggered buffer used a local struct with an uninitialized hole between sample and timestamp, risking information leakage to userspace. The fix initializes the scan struct to zero before use to avoid p...

PT-2025-3634 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns an information leak in the triggered buffer of the Linux kernel's iio light bh1745 component. The local struct 'scan' is used to send data to user space from a...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the ti-ads8688 driver failing to initialize the buffer array in the trigger buffer, resulting in uninitializ...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the vcnl4035 driver failing to initialize the buffer array in the trigger buffer, resulting in the push of...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from pushing uninitialized information into user space...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from pushing uninitialized information into user space...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the kmx61 driver failing to initialize the buffer array in the trigger buffer, resulting in uninitialized da...

Security update for rsync

This update for rsync fixes the following issues: NOTE: This update was retracted as one of the fixes was broken. A new update will be issued. CVE-2024-12085: leak of uninitialized stack data on the server leading to possible ASLR bypass. bsc1234101 CVE-2024-12086: leak of a client machine's file...

Security update for rsync

This update for rsync fixes the following issues: NOTE: This update has been retracted due to a buggy security fix. A followup update will be provided. CVE-2024-12085: leak of uninitialized stack data on the server leading to possible ASLR bypass. bsc1234101 CVE-2024-12086: leak of a client...

Google Pixel suffers from an unspecified vulnerability (CNVD-2025-00977)

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from the presence of uninitialized data in gattsr.c's gattsprocessreadbytypereq, which can lead to information disclosure. No details of the vulnerability are...

PT-2025-30803

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the vsock/vmci subsystem. Specifically, the vmci transport packet structure was not properly initialized, potentially leaving uninitialized data...

PT-2025-36279

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a kernel-infoleak issue in the do insn ioctl and do insnlist ioctl functions. A kernel buffer allocated to hold insn-n samples may not be fully initialized befo...

PT-2025-30834

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the mhi ep ring add element function where the read pointer rd offset is updated before the buffer is written. This can lead to race conditions,...

CVE-2024-56739

A vulnerability was found in the Linux kernel's RTC driver in the rtctimerdowork function, where the rtcreadtime call may fail. This issue results in uninitialized data in the rtctime struct. It can lead to the generation of extremely large values, causing periodic timer failures and potentially...