Buffer Vulnerability in Linux Kernel Affecting IIO Light Driver Products

CVE-2025-39687

What is CVE-2025-39687?

A vulnerability has been identified in the Linux kernel's IIO light driver for the as73211 sensor, where buffer holes were not properly zeroed when copied to a kernel FIFO (kfifo) accessible by user space. This oversight could potentially expose sensitive data retained in memory to unauthorized users. The issue requires attention to ensure appropriate memory management practices, emphasizing the importance of securing data before exposure in user space.

References