cve/2024/CVE-2024-57906.md

CVE-2024-57906

Description

In the Linux kernel, the following vulnerability has been resolved:iio: adc: ti-ads8688: fix information leak in triggered bufferThe 'buffer' local array is used to push data to user space from atriggered buffer, but it does not set values for inactive channels, asit only uses iio_for_each_active_channel() to assign new values.Initialize the array to zero before using it to avoid pushinguninitialized information to userspace.

POC

Reference

No PoCs from references.

Github

• https://github.com/oogasawa/Utility-security