In the Linux kernel, the following vulnerability has been resolved:
iio: light: vcnl4035: fix information leak in triggered buffer
The 'buffer' local array is used to push data to userspace from a triggered buffer, but it does not set an initial value for the single data element, which is an u16 aligned to 8 bytes. That leaves at least 4 bytes uninitialized even after writing an integer value with regmap_read().
Initialize the array to zero before using it to avoid pushing uninitialized information to userspace.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 10, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-136-genericUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-oem-20.04dUpgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-5.15.0-1084-azureUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-5.4.0-211-genericUpgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-21-genericUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-nvidia-tegraUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.11.0-1017-oemUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-azure-fipsUpgrade linux-image-ibmUpgrade linux-image-kvmUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-azureUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1080-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-intelUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-gkeUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-5.4.0-1147-azureUpgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-gcpUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-realtimeUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-oracleUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-awsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-aws-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-20.04Upgrade linux-image-bluefieldUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oemUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-aws-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-gkeopUpgrade linux-image-5.4.0-1142-aws | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub