Description
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads8688: fix information leak in triggered buffer The 'buffer' local array is used to push data to user space from a triggered buffer, but it does not set values for inactive channels, as it only uses iio_for_each_active_channel() to assign new values. Initialize the array to zero before using it to avoid pushing uninitialized information to userspace.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
26aa12ef64ee997d293659bbf645c6df99fb73e5 to < 1c80a0985a9a14f33dbf63cd703ca010f094f878affectedc923e9effe50b0a83e74e1940afbecef5456bfda to < 3bf8d1e87939b8a19c9b738564fddf5b73322f2faffected61fa5dfa5f52806f5ce37a0ba5712c271eb22f98 to < aae96738006840533cf147ffd5f41830987f21c5affected61fa5dfa5f52806f5ce37a0ba5712c271eb22f98 to < ebe2672bc42a0dfe31bb539f8ce79d024aa7e46daffected61fa5dfa5f52806f5ce37a0ba5712c271eb22f98 to < 455df95eb8f24a37abc549d6738fc8ee07eb623baffected61fa5dfa5f52806f5ce37a0ba5712c271eb22f98 to < 485570ed82b7a6bb109fa1d0a79998e21f7f4c73affected61fa5dfa5f52806f5ce37a0ba5712c271eb22f98 to < 2a7377ccfd940cd6e9201756aff1e7852c266e69affected91664385e6c49f1e961e822f2d024776ac22102aaffecteda65024fc5754f2fca73541373a2502bef603565baffected3563bb70d6baa0a5e8082397e13f62f26053c04daffected5.4.132 to < 5.4.290affected5.10.50 to < 5.10.234affected4.19.198 to < 4.20affected5.12.17 to < 5.13affected5.13.2 to < 5.14affected
Linux Linux
Default version status: affected
5.14affected0 to < 5.14unaffected5.4.290 to ≤ 5.4.*unaffected5.10.234 to ≤ 5.10.*unaffected5.15.177 to ≤ 5.15.*unaffected6.1.125 to ≤ 6.1.*unaffected6.6.72 to ≤ 6.6.*unaffected6.12.10 to ≤ 6.12.*unaffected6.13 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/1c80a0985a9a14f33dbf63cd703ca010f094f878 ↗
- https://git.kernel.org/stable/c/3bf8d1e87939b8a19c9b738564fddf5b73322f2f ↗
- https://git.kernel.org/stable/c/aae96738006840533cf147ffd5f41830987f21c5 ↗
- https://git.kernel.org/stable/c/ebe2672bc42a0dfe31bb539f8ce79d024aa7e46d ↗
- https://git.kernel.org/stable/c/455df95eb8f24a37abc549d6738fc8ee07eb623b ↗
- https://git.kernel.org/stable/c/485570ed82b7a6bb109fa1d0a79998e21f7f4c73 ↗
- https://git.kernel.org/stable/c/2a7377ccfd940cd6e9201756aff1e7852c266e69 ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html ↗