CVE-2026-63966

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A stack leak occurs in the adis16550 trigger handler() function. The function declares a scan data array on the stack without initializing it. While memcpy() fills the first 28 bytes and iio push to buffers with timestamp() writes a timestamp at offset 32, bytes 28-31 remain uninitialized. This results in uninitialized stack data leaking to userspace during every trigger.

Recommendations Zero-initialize the structure on the stack within the adis16550 trigger handler() function.