In the Linux kernel, the following vulnerability has been resolved:
iio: light: vcnl4035: fix information leak in triggered buffer
The 'buffer' local array is used to push data to userspace from a triggered buffer, but it does not set an initial value for the single data element, which is an u16 aligned to 8 bytes. That leaves at least 4 bytes uninitialized even after writing an integer value with regmap_read().
Initialize the array to zero before using it to avoid pushing uninitialized information to userspace.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/57xxx/CVE-2024-57910.json",
"cna_assigner": "Linux"
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-57910.json"
[
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"27598188749734961476771091169761033163",
"219592512180854453550502270239281397036",
"18313471952737163202799028060307186059",
"219561411066465705775307515271742489891"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cb488706cdec0d6d13f2895bcdf0c32b283a7cc7",
"signature_type": "Line",
"id": "CVE-2024-57910-25b321d1",
"target": {
"file": "drivers/iio/light/vcnl4035.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "305652484866722299670104736472883239794",
"length": 545.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cb488706cdec0d6d13f2895bcdf0c32b283a7cc7",
"signature_type": "Function",
"id": "CVE-2024-57910-fd1d5002",
"target": {
"file": "drivers/iio/light/vcnl4035.c",
"function": "vcnl4035_trigger_consumer_handler"
}
}
]