CVE-2026-63966
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
19/07/2026
Última modificación:
30/07/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
iio: imu: adis16550: fix stack leak in trigger handler<br />
<br />
adis16550_trigger_handler() declares the scan data array on the stack<br />
without initializing it. The memcpy() at the bottom fills only the<br />
first 28 bytes (TEMP + 6 channels of GYRO/ACCEL data), and<br />
iio_push_to_buffers_with_timestamp() writes the s64 timestamp at the<br />
8-byte-aligned offset 32. Bytes 28-31 remain uninitialized stack data<br />
which leaks to userspace on ever trigger.<br />
<br />
Fix this all by just zero-initializing the structure on the stack.



