CVE-2026-63967
kernel: iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 19, 2026
Updated · August 7, 2026
Description
A flaw was found in the Linux kernel's st_lsm6dsx driver. This vulnerability occurs in the tagged FIFO (First-In, First-Out) buffer path, where a buffer on the stack is not properly initialized. A local attacker could exploit this by reading uninitialized memory from the kernel stack, leading to information disclosure.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-908 · Use of Uninitialized Resource