Linux Kernel Information Leak Vulnerability in IIO Dummy Buffer

A vulnerability in the Linux kernel's IIO (Industrial I/O) subsystem has been addressed. The issue involved the 'data' array in the 'iio_simply_dummy_buffer' component, which was allocated using kmalloc() to transfer data from a triggered buffer to user space. However, the array did not initialize values for inactive channels, leading to the potential leakage of uninitialized data to userspace. This vulnerability has been fixed by changing the memory allocation to use kzalloc(), which ensures that the data is properly initialized before being sent to user space.

Impact

Exploitation of this vulnerability could result in an information leak, allowing uninitialized data to be sent to user space, which could be misused or cause unintended behavior.