CVE-2026-63936

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the mt6358 read imp() function, the val v variable is passed to regmap read() without its return value being checked. If the read operation fails, val v remains uninitialized, causing random stack content to be reported as a measurement result, which may lead to stack data leakage.

Recommendations Initialize the val v variable to zero to ensure a predictable value is reported during bus failures and to prevent the leakage of stack data.