Common vulnerabilities and Exposures (CVE)

Skip to main content

Required CVE Record Information

Description

In the Linux kernel, the following vulnerability has been resolved: iio: adc: rockchip_saradc: fix information leak in triggered buffer The 'data' local struct is used to push data to user space from a triggered buffer, but it does not set values for inactive channels, as it only uses iio_for_each_active_channel() to assign new values. Initialize the struct to zero before using it to avoid pushing uninitialized information to userspace.

Product Status

Learn more

Versions 6 Total

Default Status: unaffected

affected

  • affected from 4e130dc7b41348b13684f0758c26cc6cf72a3449 before 85a9c98a5e0f22d911b00077d751e34fff1401aa 
  • affected from 4e130dc7b41348b13684f0758c26cc6cf72a3449 before 7a07fb80ea886e9134284a27d0155cca7649e293 
  • affected from 4e130dc7b41348b13684f0758c26cc6cf72a3449 before 64b79afdca7b27a768c7d3716b7f4deb1d6b955c 
  • affected from 4e130dc7b41348b13684f0758c26cc6cf72a3449 before 5a95fbbecec7a34bbad5dcc3156700b8711d53c4 
  • affected from 4e130dc7b41348b13684f0758c26cc6cf72a3449 before 8193941bc4fe7247ff13233f328aea709f574554 
  • affected from 4e130dc7b41348b13684f0758c26cc6cf72a3449 before 38724591364e1e3b278b4053f102b49ea06ee17c 

Versions 8 Total

Default Status: affected

affected

  • affected at 5.9 

unaffected

  • unaffected from 0 before 5.9 
  • unaffected from 5.10.234 through 5.10.* 
  • unaffected from 5.15.177 through 5.15.* 
  • unaffected from 6.1.127 through 6.1.* 
  • unaffected from 6.6.72 through 6.6.* 
  • unaffected from 6.12.10 through 6.12.* 
  • unaffected from 6.13