In the Linux kernel, the following vulnerability has been resolved:
iio: light: vcnl4035: fix information leak in triggered buffer
The 'buffer' local array is used to push data to userspace from a triggered buffer, but it does not set an initial value for the single data element, which is an u16 aligned to 8 bytes. That leaves at least 4 bytes uninitialized even after writing an integer value with regmap_read().
Initialize the array to zero before using it to avoid pushing uninitialized information to userspace.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/57xxx/CVE-2024-57910.json"
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-57910.json"
[
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@47b43e53c0a0edf5578d5d12f5fc71c019649279",
"digest": {
"function_hash": "305652484866722299670104736472883239794",
"length": 545.0
},
"id": "CVE-2024-57910-0d0e44af",
"deprecated": false,
"target": {
"file": "drivers/iio/light/vcnl4035.c",
"function": "vcnl4035_trigger_consumer_handler"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a15ea87d4337479c9446b5d71616f4668337afed",
"digest": {
"function_hash": "305652484866722299670104736472883239794",
"length": 545.0
},
"id": "CVE-2024-57910-1fd9facb",
"deprecated": false,
"target": {
"file": "drivers/iio/light/vcnl4035.c",
"function": "vcnl4035_trigger_consumer_handler"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@47d245be86492974db3aeb048609542167f56518",
"digest": {
"function_hash": "305652484866722299670104736472883239794",
"length": 545.0
},
"id": "CVE-2024-57910-67a50845",
"deprecated": false,
"target": {
"file": "drivers/iio/light/vcnl4035.c",
"function": "vcnl4035_trigger_consumer_handler"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@47b43e53c0a0edf5578d5d12f5fc71c019649279",
"digest": {
"line_hashes": [
"27598188749734961476771091169761033163",
"219592512180854453550502270239281397036",
"18313471952737163202799028060307186059",
"219561411066465705775307515271742489891"
],
"threshold": 0.9
},
"id": "CVE-2024-57910-788a0cef",
"deprecated": false,
"target": {
"file": "drivers/iio/light/vcnl4035.c"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@13e56229fc81051a42731046e200493c4a7c28ff",
"digest": {
"line_hashes": [
"27598188749734961476771091169761033163",
"219592512180854453550502270239281397036",
"18313471952737163202799028060307186059",
"219561411066465705775307515271742489891"
],
"threshold": 0.9
},
"id": "CVE-2024-57910-a647ea4e",
"deprecated": false,
"target": {
"file": "drivers/iio/light/vcnl4035.c"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b0e9c11c762e4286732d80e66c08c2cb3157b06b",
"digest": {
"line_hashes": [
"27598188749734961476771091169761033163",
"219592512180854453550502270239281397036",
"18313471952737163202799028060307186059",
"219561411066465705775307515271742489891"
],
"threshold": 0.9
},
"id": "CVE-2024-57910-c3535ad0",
"deprecated": false,
"target": {
"file": "drivers/iio/light/vcnl4035.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@13e56229fc81051a42731046e200493c4a7c28ff",
"digest": {
"function_hash": "305652484866722299670104736472883239794",
"length": 545.0
},
"id": "CVE-2024-57910-c9b52fc6",
"deprecated": false,
"target": {
"file": "drivers/iio/light/vcnl4035.c",
"function": "vcnl4035_trigger_consumer_handler"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b0e9c11c762e4286732d80e66c08c2cb3157b06b",
"digest": {
"function_hash": "305652484866722299670104736472883239794",
"length": 545.0
},
"id": "CVE-2024-57910-d94dff6c",
"deprecated": false,
"target": {
"file": "drivers/iio/light/vcnl4035.c",
"function": "vcnl4035_trigger_consumer_handler"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@47d245be86492974db3aeb048609542167f56518",
"digest": {
"line_hashes": [
"27598188749734961476771091169761033163",
"219592512180854453550502270239281397036",
"18313471952737163202799028060307186059",
"219561411066465705775307515271742489891"
],
"threshold": 0.9
},
"id": "CVE-2024-57910-e0836f50",
"deprecated": false,
"target": {
"file": "drivers/iio/light/vcnl4035.c"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a15ea87d4337479c9446b5d71616f4668337afed",
"digest": {
"line_hashes": [
"27598188749734961476771091169761033163",
"219592512180854453550502270239281397036",
"18313471952737163202799028060307186059",
"219561411066465705775307515271742489891"
],
"threshold": 0.9
},
"id": "CVE-2024-57910-e31dbfb4",
"deprecated": false,
"target": {
"file": "drivers/iio/light/vcnl4035.c"
}
}
]