CVE-2024-57912

HIGH Year: 2024
CVSS v3 Score
7.1
High
Weakness Type
CWE-908
View all →

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: zpa2326: fix information leak in triggered buffer The 'sample' local struct is used to push data to user space from a triggered buffer, but it has a hole between the temperature and the timestamp (u32 pressure, u16 temperature, GAP, u64 timestamp). This hole is never initialized. Initialize the struct to zero before using it to avoid pushing uninitialized information to userspace.

Related Vulnerabilities

CVE-2019-13220

HIGH
CVSS:7.1(High)

Use of uninitialized stack variables in the start_decoder function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service or disclose sensitive information by opening a craft...

CWE-9082019

CVE-2020-15193

HIGH
CVSS:7.1(High)

In Tensorflow before versions 2.2.1 and 2.3.1, the implementation of `dlpack.to_dlpack` can be made to use uninitialized memory resulting in further memory corruption. This is because the pybind11 glu...

CWE-9082020

CVE-2021-37682

HIGH
CVSS:7.1(High)

TensorFlow is an end-to-end open source platform for machine learning. In affected versions all TFLite operations that use quantization can be made to use unitialized values. [For example](https://git...

CWE-9082021

CVE-2021-47101

HIGH
CVSS:7.1(High)

In the Linux kernel, the following vulnerability has been resolved: asix: fix uninit-value in asix_mdio_read() asix_read_cmd() may read less than sizeof(smsr) bytes and in this case smsr will be unini...

CWE-9082021

CVE-2023-52842

HIGH
CVSS:7.1(High)

In the Linux kernel, the following vulnerability has been resolved: virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt() KMSAN reported the following uninit-value access issue: ==============...

CWE-9082023

CVE-2024-35849

HIGH
CVSS:7.1(High)

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix information leak in btrfs_ioctl_logical_to_ino() Syzbot reported the following information leak for in btrfs_ioctl_logica...

CWE-9082024