Linux Kernel Information Leak Vulnerability in Rockchip SAR ADC IIO Driver

A vulnerability in the Linux kernel's IIO ADC Rockchip SAR ADC driver allows for an information leak from a triggered buffer to userspace. The issue arises because the driver does not initialize values for inactive channels, leading to the transmission of uninitialized data. This vulnerability has been addressed by modifying the driver to zero-initialize the data structure before use, ensuring that no stray data is sent to userspace.

Impact

Exploitation of this vulnerability could result in the unintentional disclosure of sensitive information from the kernel to userspace, potentially including uninitialized memory contents that could be manipulated or misused by an application.