In the Linux kernel, the following vulnerability has been resolved:

iio: buffer: Ensure bounce buffer used for unaligned case is zeroed.

iio push to buffers with ts unaligned() leaks uninitialized heap memory to userspace if the data passed in is not a multiple of 8 bytes and the timestamp is enabled. Specify GFP ZERO for the devm krealloc() to ensure any extra space is cleared.