In the Linux kernel, the following vulnerability has been resolved:
iio: imu: kmx61: fix information leak in triggered buffer
The 'buffer' local array is used to push data to user space from a triggered buffer, but it does not set values for inactive channels, as it only uses iioforeachactivechannel() to assign new values.
Initialize the array to zero before using it to avoid pushing uninitialized information to userspace.
[
{
"signature_type": "Function",
"target": {
"function": "kmx61_trigger_handler",
"file": "drivers/iio/imu/kmx61.c"
},
"digest": {
"length": 618.0,
"function_hash": "48692279168202433754175346814542353248"
},
"id": "CVE-2024-57908-06b4e9ff",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6985ba4467e4b15b809043fa7740d1fb23a1897b",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "kmx61_trigger_handler",
"file": "drivers/iio/imu/kmx61.c"
},
"digest": {
"length": 618.0,
"function_hash": "48692279168202433754175346814542353248"
},
"id": "CVE-2024-57908-16d67866",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0871eb8d700b33dd7fa86c80630d62ddaef58c2c",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "kmx61_trigger_handler",
"file": "drivers/iio/imu/kmx61.c"
},
"digest": {
"length": 589.0,
"function_hash": "323799272513483868335217151835270591639"
},
"id": "CVE-2024-57908-23bd5464",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@565814cbbaa674d2901428796801de49a611e59d",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Line",
"target": {
"file": "drivers/iio/imu/kmx61.c"
},
"digest": {
"line_hashes": [
"143274017719105106205185519323404355688",
"276561272760832494652148012325794914019",
"123306549332917620843166796774698920161",
"294533655389215385210471235142345324751"
],
"threshold": 0.9
},
"id": "CVE-2024-57908-3090345f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6985ba4467e4b15b809043fa7740d1fb23a1897b",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Line",
"target": {
"file": "drivers/iio/imu/kmx61.c"
},
"digest": {
"line_hashes": [
"143274017719105106205185519323404355688",
"276561272760832494652148012325794914019",
"123306549332917620843166796774698920161",
"294533655389215385210471235142345324751"
],
"threshold": 0.9
},
"id": "CVE-2024-57908-33ee8076",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a386d9d2dc6635f2ec210b8199cfb3acf4d31305",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Line",
"target": {
"file": "drivers/iio/imu/kmx61.c"
},
"digest": {
"line_hashes": [
"143274017719105106205185519323404355688",
"276561272760832494652148012325794914019",
"123306549332917620843166796774698920161",
"294533655389215385210471235142345324751"
],
"threshold": 0.9
},
"id": "CVE-2024-57908-440eb674",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@565814cbbaa674d2901428796801de49a611e59d",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Line",
"target": {
"file": "drivers/iio/imu/kmx61.c"
},
"digest": {
"line_hashes": [
"143274017719105106205185519323404355688",
"276561272760832494652148012325794914019",
"123306549332917620843166796774698920161",
"294533655389215385210471235142345324751"
],
"threshold": 0.9
},
"id": "CVE-2024-57908-6857ae71",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6ae053113f6a226a2303caa4936a4c37f3bfff7b",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "kmx61_trigger_handler",
"file": "drivers/iio/imu/kmx61.c"
},
"digest": {
"length": 618.0,
"function_hash": "48692279168202433754175346814542353248"
},
"id": "CVE-2024-57908-732b4a54",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a386d9d2dc6635f2ec210b8199cfb3acf4d31305",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "kmx61_trigger_handler",
"file": "drivers/iio/imu/kmx61.c"
},
"digest": {
"length": 589.0,
"function_hash": "323799272513483868335217151835270591639"
},
"id": "CVE-2024-57908-753e6f73",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6ae053113f6a226a2303caa4936a4c37f3bfff7b",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Line",
"target": {
"file": "drivers/iio/imu/kmx61.c"
},
"digest": {
"line_hashes": [
"143274017719105106205185519323404355688",
"276561272760832494652148012325794914019",
"123306549332917620843166796774698920161",
"294533655389215385210471235142345324751"
],
"threshold": 0.9
},
"id": "CVE-2024-57908-831c7ea0",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cde312e257b59ecaa0fad3af9ec7e2370bb24639",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Line",
"target": {
"file": "drivers/iio/imu/kmx61.c"
},
"digest": {
"line_hashes": [
"143274017719105106205185519323404355688",
"276561272760832494652148012325794914019",
"123306549332917620843166796774698920161",
"294533655389215385210471235142345324751"
],
"threshold": 0.9
},
"id": "CVE-2024-57908-8cba6fd6",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0871eb8d700b33dd7fa86c80630d62ddaef58c2c",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "kmx61_trigger_handler",
"file": "drivers/iio/imu/kmx61.c"
},
"digest": {
"length": 618.0,
"function_hash": "48692279168202433754175346814542353248"
},
"id": "CVE-2024-57908-c3c2fcea",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a07f698084412a3ef5e950fcac1d6b0f53289efd",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "kmx61_trigger_handler",
"file": "drivers/iio/imu/kmx61.c"
},
"digest": {
"length": 618.0,
"function_hash": "48692279168202433754175346814542353248"
},
"id": "CVE-2024-57908-d4698c19",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cde312e257b59ecaa0fad3af9ec7e2370bb24639",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Line",
"target": {
"file": "drivers/iio/imu/kmx61.c"
},
"digest": {
"line_hashes": [
"143274017719105106205185519323404355688",
"276561272760832494652148012325794914019",
"123306549332917620843166796774698920161",
"294533655389215385210471235142345324751"
],
"threshold": 0.9
},
"id": "CVE-2024-57908-ef8f68bd",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a07f698084412a3ef5e950fcac1d6b0f53289efd",
"signature_version": "v1",
"deprecated": false
}
]