In the Linux kernel, the following vulnerability has been resolved:
Input: uinput - zero-initialize uinputffupload_compat to avoid info leak
Struct ffeffectcompat is embedded twice inside uinputffuploadcompat, contains internal padding. In particular, there is a hole after struct ffreplay to satisfy alignment requirements for the following union member. Without clearing the structure, copytouser() may leak stack data to userspace.
Initialize ffupcompat to zero before filling valid fields.