Search: CVE-2024-57912

CVE-2024-57912 is a vulnerability in the Linux kernel's iio pressure sensor driver (zpa2326) where an uninitialized memory hole in a local struct causes an information leak when data is pushed to user space from a triggered buffer. The flaw arises because a gap between temperature and timestamp fields in the struct is not zeroed before use, potentially exposing sensitive kernel memory contents. This issue has been fixed by initializing the struct to zero prior to usage.