Linux Kernel Uninitialized Stack Data Vulnerability in IIO IMU ADIS16550 Driver

A vulnerability exists in the Linux kernel's IIO IMU ADIS16550 driver, where the trigger handler function does not properly initialize a stack-based data array. This oversight leads to a leak of uninitialized stack data to userspace. The issue arises because the memcpy function only populates the first 28 bytes of the array, leaving bytes 28-31 uninitialized. When the driver pushes data to buffers with a timestamp, the uninitialized bytes are included, creating a potential information leak.

Impact

The vulnerability causes a stack data leak to userspace, exposing uninitialized data.

Remediation

The vulnerability has been addressed by modifying the trigger handler to zero-initialize the scan data array before use. Users can apply the latest patches available in the Linux kernel stable tree to mitigate this issue.