CVE-2026-98668: iio: buffer: Ensure bounce buffer used for unaligned case is zeroed.
Published Oct 18, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
iio: buffer: Ensure bounce buffer used for unaligned case is zeroed.
iiopushtobufferswithtsunaligned() leaks uninitialized heap memory to userspace if the data passed in is not a multiple of 8 bytes and the timestamp is enabled. Specify GFPZERO for the devmkrealloc() to ensure any extra space is cleared.
Affected Software
1 affected component
Linux Linux kernel
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Specify __GFP_ZERO for devm_krealloc() so the bounce buffer used for unaligned data is zeroed and extra space is cleared before userspace access.
iio buffer bounce buffer __GFP_ZERO = specified
Event History
Oct 18, 2026
CVE Published
via MITRE·03:44 PM
Data Sourced
via MITRE·03:44 PM
Description
Data Sourced
via NVD·04:17 PM
Description