https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:11:57 +0000 https://vulnerability.circl.lu/vuln/cve-2026-63967 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer</p> <p>The tagged FIFO path declares iio_buff on the stack with __aligned(8) but no initializer, but there is a hole in the structure, which will then leak to userspace as ST_LSM6DSX_SAMPLE_SIZE bytes (6) will be copied, but the space between that and the timestamp are not initialized.</p> <p>Commit c14edb4d0bdc (&#34;iio:imu:st_lsm6dsx Fix alignment and data leak issues&#34;) moved the untagged FIFO path to a kzalloc&#39;d buffer in hw-&gt;scan, but for the tagged path it only added the alignment qualifier and not the initializer :(</p> <p>Fix this by just zero-initializing the structure on the stack.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer</p> <p>The tagged FIFO path declares iio_buff on the stack with __aligned(8) but no initializer, but there is a hole in the structure, which will then leak to userspace as ST_LSM6DSX_SAMPLE_SIZE bytes (6) will be copied, but the space between that and the timestamp are not initialized.</p> <p>Commit c14edb4d0bdc (&#34;iio:imu:st_lsm6dsx Fix alignment and data leak issues&#34;) moved the untagged FIFO path to a kzalloc&#39;d buffer in hw-&gt;scan, but for the tagged path it only added the alignment qualifier and not the initializer :(</p> <p>Fix this by just zero-initializing the structure on the stack.</p> https://vulnerability.circl.lu/vuln/cve-2026-63967