CVE-2024-57906

Katalog CVE

CVSS 7.1 · High EPSS 0,22%

Kerentanan Use of Uninitialized Resource pada linux kernel. Skor CVSS 3.1 7.1 (High) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads8688: fix information leak in triggered buffer The 'buffer' local array is used to push data to user space from a triggered buffer, but it does not set values for inactive channels, as it only uses iio_for_each_active_channel() to assign new values. Initialize the array to zero before using it to avoid pushing uninitialized information to userspace.

Rincian

Terbit di NVD

19 Januari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.1 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-908: Use of Uninitialized Resource

EPSS (30 hari)

0,22% peluang dieksploitasi; lebih tinggi dari 11,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/1c80a0985a9a14f33dbf63cd703ca010f094f878 patch
• https://git.kernel.org/stable/c/2a7377ccfd940cd6e9201756aff1e7852c266e69 patch
• https://git.kernel.org/stable/c/3bf8d1e87939b8a19c9b738564fddf5b73322f2f patch
• https://git.kernel.org/stable/c/455df95eb8f24a37abc549d6738fc8ee07eb623b patch
• https://git.kernel.org/stable/c/485570ed82b7a6bb109fa1d0a79998e21f7f4c73 patch
• https://git.kernel.org/stable/c/aae96738006840533cf147ffd5f41830987f21c5 patch
• https://git.kernel.org/stable/c/ebe2672bc42a0dfe31bb539f8ce79d024aa7e46d patch
• https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
• https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html