CVE-2026-63967
Received Received - Intake

Stack Leak in ST LSM6DSX IIO Driver

Publication date: 2026-07-19

Last updated on: 2026-07-19

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer The tagged FIFO path declares iio_buff on the stack with __aligned(8) but no initializer, but there is a hole in the structure, which will then leak to userspace as ST_LSM6DSX_SAMPLE_SIZE bytes (6) will be copied, but the space between that and the timestamp are not initialized. Commit c14edb4d0bdc ("iio:imu:st_lsm6dsx Fix alignment and data leak issues") moved the untagged FIFO path to a kzalloc'd buffer in hw->scan, but for the tagged path it only added the alignment qualifier and not the initializer :( Fix this by just zero-initializing the structure on the stack.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-19
Last Modified
2026-07-19
Generated
2026-07-20
AI Q&A
2026-07-19
EPSS Evaluated
N/A
NVD
CVE-2026-63967
EUVD
EUVD-2026-45740

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a stack leak in the Linux kernel's IIO IMU driver for ST LSM6DSX sensors. It occurs in the tagged FIFO buffer path where a structure is declared on the stack without proper initialization. Due to a hole in the structure, uninitialized memory is leaked to userspace when copying data.

Detection Guidance

This vulnerability is specific to the Linux kernel's IIO IMU subsystem (st_lsm6dsx driver) and does not have a direct network detection method. To check if your system is affected, verify the kernel version and the presence of the vulnerable driver. Use commands like uname -a to check the kernel version and lsmod | grep st_lsm6dsx to see if the driver is loaded.

Impact Analysis

This vulnerability could allow an attacker to read uninitialized kernel memory, potentially exposing sensitive information. It affects systems using the ST LSM6DSX IMU sensor with tagged FIFO buffer functionality in the Linux kernel.

Compliance Impact

This vulnerability involves a stack leak in the Linux kernel's IIO IMU driver, where uninitialized memory could be exposed to userspace. While it does not directly impact GDPR or HIPAA compliance, such memory leaks could potentially lead to information disclosure if exploited, indirectly affecting confidentiality requirements under these regulations.

Mitigation Strategies

Update your Linux kernel to a version that includes the fix for CVE-2026-63967. This vulnerability is resolved by ensuring proper initialization of the stack buffer in the st_lsm6dsx driver. Check your distribution's security updates or kernel patches for the fix.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-63967. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart