CVE-2026-63936

A flaw was found in the Linux kernel's MediaTek MT6359 Analog-to-Digital Converter (ADC) driver. The mt6358_read_imp() function does not properly check the return value of a read operation. If the read fails, an uninitialized variable is used, which can lead to the leakage of sensitive information from the kernel's memory (stack data leakage). This vulnerability could allow a local attacker to gain access to potentially confidential data.