CVE-2026-63967

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer<br /> <br /> The tagged FIFO path declares iio_buff on the stack with __aligned(8)<br /> but no initializer, but there is a hole in the structure, which will<br /> then leak to userspace as ST_LSM6DSX_SAMPLE_SIZE bytes (6) will be<br /> copied, but the space between that and the timestamp are not<br /> initialized.<br /> <br /> Commit c14edb4d0bdc ("iio:imu:st_lsm6dsx Fix alignment and data leak<br /> issues") moved the untagged FIFO path to a kzalloc&amp;#39;d buffer in hw-&gt;scan,<br /> but for the tagged path it only added the alignment qualifier and not<br /> the initializer :(<br /> <br /> Fix this by just zero-initializing the structure on the stack.