CVE-2026-68089: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If *ppos is non-zero then simple_write_to_buffer() will not initialize the start of buf[]. Non zero values for *ppos aren't going to work anyway. Test for them at the start of the function and return -EINVAL.

Засегнати продукти

• Linux Linux: 6d5dd486c715908b5a6ed02315a15ff044a91025 преди e166a8cfb28a3d0da260dd70cae274eb8c7cec8d; 6d5dd486c715908b5a6ed02315a15ff044a91025 преди 89fbd3e32dffb6227f936a9578e6eb4632aa4580; 6d5dd486c715908b5a6ed02315a15ff044a91025 преди ab92ed206d41fd171ebd37bc46360d9f2140d043
• Linux Linux: 6.15; преди 6.15; 6.18.39 до 6.18.*; 7.1.4 до 7.1.*; от 7.2 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-68089
• https://nvd.nist.gov/vuln/detail/CVE-2026-68089
• https://git.kernel.org/stable/c/e166a8cfb28a3d0da260dd70cae274eb8c7cec8d
• https://git.kernel.org/stable/c/89fbd3e32dffb6227f936a9578e6eb4632aa4580
• https://git.kernel.org/stable/c/ab92ed206d41fd171ebd37bc46360d9f2140d043