CVE-2024-57907

Feb. 2, 2025, 11:15 a.m.

None
No Score

Description

In the Linux kernel, the following vulnerability has been resolved: iio: adc: rockchip_saradc: fix information leak in triggered buffer The 'data' local struct is used to push data to user space from a triggered buffer, but it does not set values for inactive channels, as it only uses iio_for_each_active_channel() to assign new values. Initialize the struct to zero before using it to avoid pushing uninitialized information to userspace.

Product(s) Impacted

Product Versions
Linux kernel

Weaknesses

Common security weaknesses mapped to this vulnerability.

References

https://git.kernel.org/stable/c/38724591364e1e3b278b4053f102b49ea06ee17c
https://git.kernel.org/stable/c/5a95fbbecec7a34bbad5dcc3156700b8711d53c4
https://git.kernel.org/stable/c/64b79afdca7b27a768c7d3716b7f4deb1d6b955c
https://git.kernel.org/stable/c/7a07fb80ea886e9134284a27d0155cca7649e293
https://git.kernel.org/stable/c/8193941bc4fe7247ff13233f328aea709f574554
https://git.kernel.org/stable/c/85a9c98a5e0f22d911b00077d751e34fff1401aa

Tags

416baaa9-dc9f-4396-8d5f-8c081fb06d67
2025-01-19
CVE-2024-57907

Timeline

Published: Jan. 19, 2025, 12:15 p.m.
Last Modified: Feb. 2, 2025, 11:15 a.m.

Status : Undergoing Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

416baaa9-dc9f-4396-8d5f-8c081fb06d67

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.