In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Ensure bounce buffer used for unaligned case is zeroed. (CVE-2026-98668)

The Linux kernel contained a vulnerability in the iio buffer code where the bounce buffer used for unaligned data cases was not zeroed. Specifically, iio_push_to_buffers_with_ts_unaligned() could leak uninitialized heap memory to userspace if the input data size was not aligned to 8 bytes and timestamping was enabled. The fix involved specifying __GFP_ZERO in devm_krealloc() to clear any extra allocated space, preventing memory leakage.

This vulnerability could lead to information disclosure by leaking uninitialized kernel heap memory to userspace processes. Such leakage may expose sensitive kernel memory contents, potentially aiding attackers in further exploitation or information gathering.

A fix has been applied to the Linux kernel to zero the bounce buffer in the affected function. Users should update their Linux kernel to a version that includes this fix. Since this is a kernel-level issue, applying the official kernel patch or upgrading to a fixed kernel release is the recommended remediation.