CVE-2026-68089 PUBLISHED

iio: core: fix uninitialized data in debugfs

Assigner: Linux
Reserved: 30.07.2026 Published: 10.08.2026 Updated: 10.08.2026

In the Linux kernel, the following vulnerability has been resolved:

iio: core: fix uninitialized data in debugfs

If ppos is non-zero then simple_write_to_buffer() will not initialize the start of buf[]. Non zero values for ppos aren't going to work anyway. Test for them at the start of the function and return -EINVAL.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 6d5dd486c715908b5a6ed02315a15ff044a91025 to e166a8cfb28a3d0da260dd70cae274eb8c7cec8d (excl.)
  • affected from 6d5dd486c715908b5a6ed02315a15ff044a91025 to 89fbd3e32dffb6227f936a9578e6eb4632aa4580 (excl.)
  • affected from 6d5dd486c715908b5a6ed02315a15ff044a91025 to ab92ed206d41fd171ebd37bc46360d9f2140d043 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.15 is affected
  • unaffected from 0 to 6.15 (excl.)
  • unaffected from 6.18.39 to 6.18.* (incl.)
  • unaffected from 7.1.4 to 7.1.* (incl.)
  • unaffected from 7.2-rc1 to * (incl.)

References