Linux Kernel Information Leak Vulnerability in IIO KMX61 Driver

A vulnerability in the Linux kernel's IIO (Industrial I/O) subsystem, specifically within the KMX61 inertial measurement unit (IMU) driver, has been addressed. The issue involved an information leak through the triggered buffer mechanism. The local 'buffer' array, used to transfer data to user space, failed to initialize values for inactive channels, leading to the potential exposure of uninitialized data. This vulnerability has been resolved by ensuring the array is properly zeroed before use, preventing the leakage of uninitialized information to userspace.

Impact

Exploitation of this vulnerability could result in an information leak, allowing uninitialized data to be sent to user space, which could be misused or cause unintended behavior.