Linux Kernel Information Leak Vulnerability in IIO Light BH1745 Driver

A vulnerability in the Linux kernel's IIO light BH1745 driver has been addressed, which involved an information leak from the triggered buffer to user space. The issue arose because the 'scan' local structure did not initialize values for inactive channels, leading to the transmission of uninitialized data. The vulnerability has been fixed by ensuring the structure is zeroed out before use, preventing the leakage of undefined information to users.

Impact

The vulnerability could have allowed the unintentional exposure of uninitialized data to user space, potentially leading to information disclosure.