CVE-2026-63965

A flaw was found in the Linux kernel's bmp280 pressure sensor driver. The bmp580_trigger_handler() function fails to initialize a stack-allocated buffer, which can lead to two bytes of uninitialized stack memory being exposed to userspace. This information disclosure vulnerability could allow a local attacker to obtain sensitive information from the kernel stack.