CVE-2026-63966

kernel: iio: imu: adis16550: fix stack leak in trigger handler

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 19, 2026

Updated · August 7, 2026

Description

A flaw was found in the Linux kernel's adis16550 Industrial Input/Output (IIO) Inertial Measurement Unit (IMU) driver. The adis16550_trigger_handler() function fails to fully initialize a stack-allocated data array. This oversight allows uninitialized stack memory to be exposed to userspace, leading to information disclosure with every trigger of the driver.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-908 · Use of Uninitialized Resource