CVE-2026-72481

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The AK8975 driver contains four instances where uninitialized kernel stack memory leaks can occur. This happens when the function i2c smbus read i2c block data or emulated() returns a value smaller than the buffer size, causing uninitialized bytes to remain in the buffer. These buffers are subsequently passed to IIO buffers, which may leak sensitive kernel memory to userspace.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.