CVE-2024-57910: iio: light: vcnl4035: fix information leak in triggered buffer

Severity: high (CVSS 7.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-01-19 · updated 2026-06-17
Weakness: CWE-908

Description

In the Linux kernel, the following vulnerability has been resolved: iio: light: vcnl4035: fix information leak in triggered buffer The 'buffer' local array is used to push data to userspace from a triggered buffer, but it does not set an initial value for the single data element, which is an u16 aligned to 8 bytes. That leaves at least 4 bytes uninitialized even after writing an integer value with regmap_read(). Initialize the array to zero before using it to avoid pushing uninitialized information to userspace.

Affected products

Linux kernel: from 5.4.132 before 5.4.290; from 5.10.50 before 5.10.234; from 5.12.17 before 5.13; from 5.13.2 before 5.15.177; from 5.16 before 6.1.125; from 6.2 before 6.6.72 — fixed in 5.10.234, 5.13, 5.15.177, 5.4.290, 6.1.125, 6.12.10

How to fix

Upgrade to a fixed version: Linux kernel 5.10.234, 5.13, 5.15.177, 5.4.290. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-57910 or the next vulnerability affects your stack