SB20260720270 - Use of Uninitialized Variable in Linux kernel iio imu driver

Description

This security bulletin contains information about 1 vulnerability.

1) Use of Uninitialized Variable (CVE-ID: CVE-2026-63966)

CWE-ID: CWE-457 - Use of Uninitialized Variable

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to disclose uninitialized kernel stack memory to userspace.

The vulnerability exists due to an uninitialized stack variable in adis16550_trigger_handler() when handling triggered buffer data collection. A local user can trigger the handler and read leaked stack bytes from the resulting userspace buffer to disclose uninitialized kernel stack memory to userspace.

Bytes 28 through 31 of the scan data buffer remain uninitialized and are exposed on each trigger due to timestamp alignment.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/474f8928d50b09f7dcf507049f08732640b88b49
• https://git.kernel.org/stable/c/c2c255444392872cbbf46d640cb3a938e8000309
• https://git.kernel.org/stable/c/ce582b22dd2ff15ac99101c22ec1559d1febe2ff