CVE-2026-63934
kernel: iio: gyro: itg3200: fix i2c read into the wrong stack location
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 19, 2026
Updated · August 7, 2026
Description
A flaw was found in the Linux kernel's iio_itg3200 gyroscope driver. An incorrect I2C (Inter-Integrated Circuit) read operation in the itg3200_read_all_channels() function causes uninitialized stack memory to be exposed to userspace. This information leak could allow a local attacker to gain access to sensitive data from the kernel stack.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-908 · Use of Uninitialized Resource