CVE-2024-26711

MEDIUM

Linux Kernel 6.2-6.6.17 - Use of Uninitialized Resource in ADC Clock Initialization

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad4130: zero-initialize clock init data The clk_init_data struct does not have all its members initialized, causing issues when trying to expose the internal clock on the CLK pin. Fix this by zero-initializing the clk_init_data struct.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/0e0dab37750926d4fb0144edb1c1ea0612fea273

Patch

https://git.kernel.org/stable/c/02876e2df02f8b17a593d77a0a7879a8109b27e1

Patch

https://git.kernel.org/stable/c/a22b0a2be69a36511cb5b37d948b651ddf7debf3

Scores

CVSS v3 5.5

EPSS 0.0023

EPSS Percentile 13.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-908

Status published

Products (12)

linux/Kernel 6.2.0 - 6.6.18linux

linux/Kernel 6.7.0 - 6.7.6linux

Linux/Linux < 6.2

Linux/Linux 6.2

Linux/Linux 6.6.18 - 6.6.*

Linux/Linux 6.7.6 - 6.7.*

Linux/Linux 6.8

Linux/Linux 62094060cf3acaf52e277457d807ea753269b89e - 02876e2df02f8b17a593d77a0a7879a8109b27e1

Linux/Linux 62094060cf3acaf52e277457d807ea753269b89e - 0e0dab37750926d4fb0144edb1c1ea0612fea273

Linux/Linux 62094060cf3acaf52e277457d807ea753269b89e - a22b0a2be69a36511cb5b37d948b651ddf7debf3

... and 2 more

Published Apr 03, 2024

Tracked Since Feb 18, 2026