CVE-2024-57907
Published: Jan 19, 2025
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: iio: adc: rockchip_saradc: fix information leak in triggered buffer The 'data' local struct is used to push data to user space from a triggered buffer, but it does not set values for inactive channels, as it only uses iio_for_each_active_channel() to assign new values. Initialize the struct to zero before using it to avoid pushing uninitialized information to userspace.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 4e130dc7b41348b13684f0758c26cc6cf72a3449 - < 85a9c98a5e0f22d911b00077d751e34fff1401aaaffected 4e130dc7b41348b13684f0758c26cc6cf72a3449 - < 7a07fb80ea886e9134284a27d0155cca7649e293affected 4e130dc7b41348b13684f0758c26cc6cf72a3449 - < 64b79afdca7b27a768c7d3716b7f4deb1d6b955caffected 4e130dc7b41348b13684f0758c26cc6cf72a3449 - < 5a95fbbecec7a34bbad5dcc3156700b8711d53c4affected 4e130dc7b41348b13684f0758c26cc6cf72a3449 - < 8193941bc4fe7247ff13233f328aea709f574554+1 more versions |
Linux | Linux | affected 5.9unaffected 0 - < 5.9unaffected 5.10.234 - <= 5.10.*unaffected 5.15.177 - <= 5.15.*unaffected 6.1.127 - <= 6.1.*+3 more versions |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now