The Linux kernel's iio: imu: st_lsm6dsx driver had a flaw where the tagged FIFO path declared a stack buffer with alignment but without initialization. Because of a hole in the structure, uninitialized memory between the sample data and timestamp was leaked to userspace. The untagged FIFO path was previously fixed by using a zeroed heap allocation, but the tagged path only added alignment without zero-initialization. The fix involved zero-initializing the stack buffer to prevent data leakage.

Uninitialized kernel stack memory could be leaked to userspace, potentially exposing sensitive kernel data. There is no indication of active exploitation in the wild. The impact is limited to information disclosure via the tagged FIFO buffer in the affected driver.

A fix has been implemented in the Linux kernel to zero-initialize the stack buffer in the tagged FIFO path of the st_lsm6dsx driver. Users should update to the fixed kernel version containing commit c14edb4d0bdc or later. No additional mitigation is indicated.