-

CVE-2026-63967

iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer

In the Linux kernel, the following vulnerability has been resolved:

iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer

The tagged FIFO path declares iio_buff on the stack with __aligned(8)
but no initializer, but there is a hole in the structure, which will
then leak to userspace as ST_LSM6DSX_SAMPLE_SIZE bytes (6) will be
copied, but the space between that and the timestamp are not
initialized.

Commit c14edb4d0bdc ("iio:imu:st_lsm6dsx Fix alignment and data leak
issues") moved the untagged FIFO path to a kzalloc'd buffer in hw->scan,
but for the tagged path it only added the alignment qualifier and not
the initializer :(

Fix this by just zero-initializing the structure on the stack.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version c14edb4d0bdc53f969ea84c7f384472c28b1a9f8
Version < ff8d3c088b77b11782f2c3b97e37425be050e8de
Status affected
Version c14edb4d0bdc53f969ea84c7f384472c28b1a9f8
Version < fe1a7f99e72ebd2880515332b79b8c256be22aca
Status affected
Version c14edb4d0bdc53f969ea84c7f384472c28b1a9f8
Version < babf1943a40bb5669db57d30ca16c22504b18e07
Status affected
Version c14edb4d0bdc53f969ea84c7f384472c28b1a9f8
Version < d42ac0bfb6a16617c62a59d53706579c7fadbfa6
Status affected
Version c14edb4d0bdc53f969ea84c7f384472c28b1a9f8
Version < 3147b303b8c7d9f91da4b849ece33b45048f5eaf
Status affected
Version c14edb4d0bdc53f969ea84c7f384472c28b1a9f8
Version < e6bb3a49c5f9de870ea95e69775df785728e3366
Status affected
Version c14edb4d0bdc53f969ea84c7f384472c28b1a9f8
Version < 890d0312d5f94be43eac21f5a34d3bccc60d051b
Status affected
Version c14edb4d0bdc53f969ea84c7f384472c28b1a9f8
Version < c9d8e9adaa63150ef7e833480b799d0bab83a276
Status affected
Version a42ca3b182ccb766666a0be1053921cba190e2de
Status affected
Version 5.9.5
Version < 5.10
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version 5.10
Status affected
Version 0
Version < 5.10
Status unaffected
Version <= 5.10.*
Version 5.10.259
Status unaffected
Version <= 5.15.*
Version 5.15.210
Status unaffected
Version <= 6.1.*
Version 6.1.176
Status unaffected
Version <= 6.6.*
Version 6.6.143
Status unaffected
Version <= 6.12.*
Version 6.12.93
Status unaffected
Version <= 6.18.*
Version 6.18.35
Status unaffected
Version <= 7.0.*
Version 7.0.12
Status unaffected
Version <= *
Version 7.1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.114
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/ff8d3c088b77b11782f2c3b97e37425be050e8de
https://git.kernel.org/stable/c/fe1a7f99e72ebd2880515332b79b8c256be22aca
https://git.kernel.org/stable/c/babf1943a40bb5669db57d30ca16c22504b18e07
https://git.kernel.org/stable/c/d42ac0bfb6a16617c62a59d53706579c7fadbfa6
https://git.kernel.org/stable/c/3147b303b8c7d9f91da4b849ece33b45048f5eaf
https://git.kernel.org/stable/c/e6bb3a49c5f9de870ea95e69775df785728e3366
https://git.kernel.org/stable/c/890d0312d5f94be43eac21f5a34d3bccc60d051b
https://git.kernel.org/stable/c/c9d8e9adaa63150ef7e833480b799d0bab83a276