Linux Kernel Information Leak Vulnerability in IIO Pressure ZPA2326

A vulnerability has been identified in the Linux kernel's IIO pressure driver for the ZPA2326 sensor. The issue involves an information leak from a triggered buffer to user space. The local 'sample' structure, which is used to transfer data, contains an uninitialized gap between the temperature and timestamp fields. This gap can lead to the exposure of uninitialized data to user space. The vulnerability has been addressed by initializing the structure to zero before use.

Impact

Exploitation of this vulnerability could result in the unintentional disclosure of uninitialized memory contents to user space, potentially leading to information leakage.