CVE-2024-57905

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns an information leak in the triggered buffer of the Linux kernel's ti-ads1119 ADC driver. The scan local struct, used to push data to user space, contains an uninitialized hole between the sample and the timestamp. This hole is never initialized, allowing uninitialized information to be pushed to userspace. The fix involves initializing the struct to zero before using it.

Recommendations Initialize the scan struct to zero before using it to avoid pushing uninitialized information to userspace. As a temporary workaround, consider restricting access to the triggered buffer in the ti-ads1119 ADC driver until a patch is available.