CVE-2025-22082 is a medium severity vulnerability in the Linux kernel's Industrial I/O (iio) subsystem. It involves a stack buffer that is not properly NULL terminated before being passed to sscanf(), which may lead to undefined behavior or denial of service. The issue arises because the stack variable is not guaranteed to be zero-initialized. This flaw has been resolved by ensuring the buffer is NULL terminated before use.