CVE-2024-57910
Published: Jan 19, 2025
Modified: May 23, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: iio: light: vcnl4035: fix information leak in triggered buffer The 'buffer' local array is used to push data to userspace from a triggered buffer, but it does not set an initial value for the single data element, which is an u16 aligned to 8 bytes. That leaves at least 4 bytes uninitialized even after writing an integer value with regmap_read(). Initialize the array to zero before using it to avoid pushing uninitialized information to userspace.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected da8ef748fec2d55db0ae424ab40eee0c737564aa - < 13e56229fc81051a42731046e200493c4a7c28ffaffected 49739675048d372946c1ef136c466d5675eba9f0 - < b0e9c11c762e4286732d80e66c08c2cb3157b06baffected ec90b52c07c0403a6db60d752484ec08d605ead0 - < cb488706cdec0d6d13f2895bcdf0c32b283a7cc7affected ec90b52c07c0403a6db60d752484ec08d605ead0 - < 47d245be86492974db3aeb048609542167f56518affected ec90b52c07c0403a6db60d752484ec08d605ead0 - < a15ea87d4337479c9446b5d71616f4668337afed+8 more versions |
Linux | Linux | affected 5.14unaffected 0 - < 5.14unaffected 5.4.290 - <= 5.4.*unaffected 5.10.234 - <= 5.10.*unaffected 5.15.177 - <= 5.15.*+4 more versions |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now