In the Linux kernel, the following vulnerability has been resolved:
iio: light: vcnl4035: fix information leak in triggered buffer
The 'buffer' local array is used to push data to userspace from a triggered buffer, but it does not set an initial value for the single data element, which is an u16 aligned to 8 bytes. That leaves at least 4 bytes uninitialized even after writing an integer value with regmap_read().
Initialize the array to zero before using it to avoid pushing uninitialized information to userspace.
[
{
"id": "CVE-2024-57910-0d0e44af",
"target": {
"file": "drivers/iio/light/vcnl4035.c",
"function": "vcnl4035_trigger_consumer_handler"
},
"digest": {
"function_hash": "305652484866722299670104736472883239794",
"length": 545.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@47b43e53c0a0edf5578d5d12f5fc71c019649279",
"signature_version": "v1"
},
{
"id": "CVE-2024-57910-1fd9facb",
"target": {
"file": "drivers/iio/light/vcnl4035.c",
"function": "vcnl4035_trigger_consumer_handler"
},
"digest": {
"function_hash": "305652484866722299670104736472883239794",
"length": 545.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a15ea87d4337479c9446b5d71616f4668337afed",
"signature_version": "v1"
},
{
"id": "CVE-2024-57910-25b321d1",
"target": {
"file": "drivers/iio/light/vcnl4035.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"27598188749734961476771091169761033163",
"219592512180854453550502270239281397036",
"18313471952737163202799028060307186059",
"219561411066465705775307515271742489891"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cb488706cdec0d6d13f2895bcdf0c32b283a7cc7",
"signature_version": "v1"
},
{
"id": "CVE-2024-57910-788a0cef",
"target": {
"file": "drivers/iio/light/vcnl4035.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"27598188749734961476771091169761033163",
"219592512180854453550502270239281397036",
"18313471952737163202799028060307186059",
"219561411066465705775307515271742489891"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@47b43e53c0a0edf5578d5d12f5fc71c019649279",
"signature_version": "v1"
},
{
"id": "CVE-2024-57910-a647ea4e",
"target": {
"file": "drivers/iio/light/vcnl4035.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"27598188749734961476771091169761033163",
"219592512180854453550502270239281397036",
"18313471952737163202799028060307186059",
"219561411066465705775307515271742489891"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@13e56229fc81051a42731046e200493c4a7c28ff",
"signature_version": "v1"
},
{
"id": "CVE-2024-57910-c9b52fc6",
"target": {
"file": "drivers/iio/light/vcnl4035.c",
"function": "vcnl4035_trigger_consumer_handler"
},
"digest": {
"function_hash": "305652484866722299670104736472883239794",
"length": 545.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@13e56229fc81051a42731046e200493c4a7c28ff",
"signature_version": "v1"
},
{
"id": "CVE-2024-57910-e31dbfb4",
"target": {
"file": "drivers/iio/light/vcnl4035.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"27598188749734961476771091169761033163",
"219592512180854453550502270239281397036",
"18313471952737163202799028060307186059",
"219561411066465705775307515271742489891"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a15ea87d4337479c9446b5d71616f4668337afed",
"signature_version": "v1"
},
{
"id": "CVE-2024-57910-fd1d5002",
"target": {
"file": "drivers/iio/light/vcnl4035.c",
"function": "vcnl4035_trigger_consumer_handler"
},
"digest": {
"function_hash": "305652484866722299670104736472883239794",
"length": 545.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cb488706cdec0d6d13f2895bcdf0c32b283a7cc7",
"signature_version": "v1"
}
]