Search: CVE-2024-57911

CVE-2024-57911 is a high-severity vulnerability in the Linux kernel's Industrial I/O (iio) subsystem, specifically in the dummy driver. The flaw involves an information leak caused by uninitialized memory being pushed to user space from a triggered buffer. This occurs because the data array allocated with kmalloc() does not initialize values for inactive channels, potentially exposing sensitive kernel memory contents.