CVE-2024-57911

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-57911
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-57911.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-57911
Downstream
Related
Published
2025-01-19T11:52:33Z
Modified
2026-08-12T03:30:16Z
Severity
  • 7.1 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
Summary
iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
Details

In the Linux kernel, the following vulnerability has been resolved:

iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer

The 'data' array is allocated via kmalloc() and it is used to push data to user space from a triggered buffer, but it does not set values for inactive channels, as it only uses iio_for_each_active_channel() to assign new values.

Use kzalloc for the memory allocation to avoid pushing uninitialized information to userspace.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/57xxx/CVE-2024-57911.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
415f792447572ef1949a3cef5119bbce8cc66373
Fixed
03fa47621bf8fcbf5994c5716021527853f9af3d
Fixed
e1c1e8c05010103c9c9ea3e9c4304b0b7e2c8e4a
Fixed
006073761888a632c5d6f93e47c41760fa627f77
Fixed
b0642d9c871aea1f28eb02cd84d60434df594f67
Fixed
74058395b2c63c8a438cf199d09094b640f8c7f4
Fixed
ea703cda36da0dacb9a2fd876370003197d8a019
Fixed
333be433ee908a53f283beb95585dfc14c8ffb46

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-57911.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.5.0
Fixed
5.4.290
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.234
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.177
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.125
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.72
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.10

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-57911.json"