Threats tagged 'ghsa-2w6v-cv9c-qwv2'

CVE-2024-57911 is a high-severity vulnerability in the Linux kernel's Industrial I/O (iio) subsystem, specifically in the dummy driver. The flaw involves an information leak caused by uninitialized memory being pushed to user space from a triggered buffer. This occurs because the data array allocated with kmalloc() does not initialize values for inactive channels, potentially exposing sensitive kernel memory contents.