CVE-2026-63966
Received Received - Intake

Stack Leak in Linux Kernel IIO ADIS16550 Driver

Publication date: 2026-07-19

Last updated on: 2026-07-19

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16550: fix stack leak in trigger handler adis16550_trigger_handler() declares the scan data array on the stack without initializing it. The memcpy() at the bottom fills only the first 28 bytes (TEMP + 6 channels of GYRO/ACCEL data), and iio_push_to_buffers_with_timestamp() writes the s64 timestamp at the 8-byte-aligned offset 32. Bytes 28-31 remain uninitialized stack data which leaks to userspace on ever trigger. Fix this all by just zero-initializing the structure on the stack.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-19
Last Modified
2026-07-19
Generated
2026-07-20
AI Q&A
2026-07-19
EPSS Evaluated
N/A
NVD
CVE-2026-63966
EUVD
EUVD-2026-45739

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel to 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a stack data leak in the Linux kernel's IIO IMU driver for the ADIS16550 device. The trigger handler function declares a scan data array on the stack without initializing it. When data is copied and timestamped, uninitialized stack memory from bytes 28-31 is exposed to userspace during each trigger event.

Detection Guidance

This vulnerability is specific to the Linux kernel's IIO IMU subsystem, particularly the adis16550 driver. Detection requires checking the kernel version and verifying if the vulnerable code is present. Use commands like 'uname -a' to check the kernel version and 'modinfo adis16550' to inspect the driver module. If the kernel version is vulnerable, the issue may be present.

Impact Analysis

This vulnerability could allow an attacker with local access to read uninitialized kernel stack memory. This might expose sensitive information from other processes or kernel operations, potentially leading to information disclosure or privilege escalation if combined with other exploits.

Compliance Impact

This vulnerability involves a stack leak in the Linux kernel's IIO driver, where uninitialized stack data is exposed to userspace. While it does not directly impact GDPR or HIPAA compliance, such memory leaks could potentially lead to information disclosure if exploited, which may violate data protection principles under GDPR or compromise sensitive data handling required by HIPAA.

Mitigation Strategies

Apply the kernel update that includes the fix for this vulnerability. If an update is not immediately available, consider disabling the adis16550 driver if it is not required. Monitor vendor advisories for patches and apply them as soon as possible to prevent potential stack data leaks.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-63966. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart