logo_clicknbuy.png

CVE-2024-57905 – “Linux TI-ADS1119 IIO ADC Information Leak”

The following table lists the changes that have been made to the
CVE-2024-57905 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Jan. 19, 2025

    Action Type Old Value New Value
    Added Description In the Linux kernel, the following vulnerability has been resolved:

    iio: adc: ti-ads1119: fix information leak in triggered buffer

    The ‘scan’ local struct is used to push data to user space from a
    triggered buffer, but it has a hole between the sample (unsigned int)
    and the timestamp. This hole is never initialized.

    Initialize the struct to zero before using it to avoid pushing
    uninitialized information to userspace.
    Added Reference https://git.kernel.org/stable/c/2f1687cca911a2f294313c762e0646cd9e7be8cc
    Added Reference https://git.kernel.org/stable/c/75f339d3ecd38cb1ce05357d647189d4a7f7ed08
Share the Post:

Related Posts