CVE-2026-68089: iio: core: fix uninitialized data in debugfs
In the Linux kernel, the following vulnerability has been resolved:
iio: core: fix uninitialized data in debugfs
If ppos is non-zero then simplewritetobuffer() will not initialize the start of buf[]. Non zero values for ppos aren't going to work anyway. Test for them at the start of the function and return -EINVAL.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68089?
CVE-2026-68089 has a risk rating of 10, indicating a critical level of severity.
How do I fix CVE-2026-68089?
To mitigate CVE-2026-68089, update your Linux kernel to the latest version where this vulnerability has been resolved.
What systems are affected by CVE-2026-68089?
CVE-2026-68089 affects the Linux kernel, particularly systems utilizing the iio core in debugfs.
What does CVE-2026-68089 impact?
CVE-2026-68089 impacts the initialization of data in the debugfs interface of the Linux kernel.
Is CVE-2026-68089 exploitable?
Yes, due to its critical severity score, CVE-2026-68089 could potentially be exploited to compromise system integrity if left unpatched.