Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If *ppos is non-zero then simple_write_to_buffer() will not initialize the start of buf[]. Non zero values for *ppos aren't going to work anyway. Test for them at the start of the function and return -EINVAL.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 6d5dd486c715908b5a6ed02315a15ff044a91025 before e166a8cfb28a3d0da260dd70cae274eb8c7cec8d; affected 6d5dd486c715908b5a6ed02315a15ff044a91025 before 89fbd3e32dffb6227f936a9578e6eb4632aa4580; affected 6d5dd486c715908b5a6ed02315a15ff044a91025 before ab92ed206d41fd171ebd37bc46360d9f2140d043 |
| Linux / Linux | affected 6.15; unaffected 0 before 6.15; unaffected 6.18.39 through 6.18.*; unaffected 7.1.4 through 7.1.*; unaffected 7.2 through * |
CWE
No CWE identifiers supplied.