CVE-2024-57909
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-57909
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-57909.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-57909
- Downstream
- Published
- 2025-01-19T11:52:32Z
- Modified
- 2025-10-22T07:35:19.054600Z
- Severity
-
- 7.1 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
- Summary
- iio: light: bh1745: fix information leak in triggered buffer
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
iio: light: bh1745: fix information leak in triggered buffer
The 'scan' local struct is used to push data to user space from a triggered buffer, but it does not set values for inactive channels, as it only uses iioforeachactivechannel() to assign new values.
Initialize the struct to zero before using it to avoid pushing uninitialized information to userspace.
- References
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedeab35358aae705b779a7c8b405474d1290175196Fixed1cca2a666e099aa018e5ab385f0a6e01a3053629
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedeab35358aae705b779a7c8b405474d1290175196Fixedb62fbe3b8eedd3cf3c9ad0b7cb9f72c3f40815f0