CVE-2026-63967

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A stack leak exists in the tagged FIFO buffer of the st lsm6dsx IMU driver. The iio buff structure is declared on the stack with alignment but without an initializer. Due to a hole in the structure, uninitialized memory is leaked to userspace when ST LSM6DSX SAMPLE SIZE bytes are copied, as the space between the sample data and the timestamp remains uninitialized.

Recommendations Zero-initialize the iio buff structure on the stack to prevent memory leakage.