Description
In the Linux kernel, the following vulnerability has been resolved: iio: light: vcnl4035: fix information leak in triggered buffer The 'buffer' local array is used to push data to userspace from a triggered buffer, but it does not set an initial value for the single data element, which is an u16 aligned to 8 bytes. That leaves at least 4 bytes uninitialized even after writing an integer value with regmap_read(). Initialize the array to zero before using it to avoid pushing uninitialized information to userspace.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
da8ef748fec2d55db0ae424ab40eee0c737564aa to < 13e56229fc81051a42731046e200493c4a7c28ffaffected49739675048d372946c1ef136c466d5675eba9f0 to < b0e9c11c762e4286732d80e66c08c2cb3157b06baffectedec90b52c07c0403a6db60d752484ec08d605ead0 to < cb488706cdec0d6d13f2895bcdf0c32b283a7cc7affectedec90b52c07c0403a6db60d752484ec08d605ead0 to < 47d245be86492974db3aeb048609542167f56518affectedec90b52c07c0403a6db60d752484ec08d605ead0 to < a15ea87d4337479c9446b5d71616f4668337afedaffectedec90b52c07c0403a6db60d752484ec08d605ead0 to < f6fb1c59776b4263634c472a5be8204c906ffc2caffectedec90b52c07c0403a6db60d752484ec08d605ead0 to < 47b43e53c0a0edf5578d5d12f5fc71c019649279affectedd69f0d132563a63688efb0afb4dfeaa74a217306affected4637815d7922c4bce3bacb13dd1fb5e9a7d167d8affected5.4.132 to < 5.4.290affected5.10.50 to < 5.10.234affected5.12.17 to < 5.13affected5.13.2 to < 5.14affected
Linux Linux
Default version status: affected
5.14affected0 to < 5.14unaffected5.4.290 to ≤ 5.4.*unaffected5.10.234 to ≤ 5.10.*unaffected5.15.177 to ≤ 5.15.*unaffected6.1.125 to ≤ 6.1.*unaffected6.6.72 to ≤ 6.6.*unaffected6.12.10 to ≤ 6.12.*unaffected6.13 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/13e56229fc81051a42731046e200493c4a7c28ff ↗
- https://git.kernel.org/stable/c/b0e9c11c762e4286732d80e66c08c2cb3157b06b ↗
- https://git.kernel.org/stable/c/cb488706cdec0d6d13f2895bcdf0c32b283a7cc7 ↗
- https://git.kernel.org/stable/c/47d245be86492974db3aeb048609542167f56518 ↗
- https://git.kernel.org/stable/c/a15ea87d4337479c9446b5d71616f4668337afed ↗
- https://git.kernel.org/stable/c/f6fb1c59776b4263634c472a5be8204c906ffc2c ↗
- https://git.kernel.org/stable/c/47b43e53c0a0edf5578d5d12f5fc71c019649279 ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html ↗