Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's IIO ADC TI-ADS1119 driver has been addressed, which involved an information leak from the triggered buffer to user space. The issue arose because the 'scan' local structure, used to transfer data, contained an uninitialized gap between the sample and the timestamp. This gap could inadvertently expose uninitialized data to user space. The vulnerability has been resolved by initializing the structure to zero before use.
The vulnerability could lead to an unintentional disclosure of uninitialized memory contents to user space, potentially allowing for the leakage of sensitive information.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.