CVE-2026-68089

CVE-2026-68089

published August 10, 2026

CVSS
—
EPSS
0%
Percentile
10.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

iio: core: fix uninitialized data in debugfs

If *ppos is non-zero then simple_write_to_buffer() will not initialize

the start of buf[]. Non zero values for *ppos aren't going to work

anyway. Test for them at the start of the function and return -EINVAL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00206 · 10.2th percentile
Published
2026-08-10T16:17Z
References (3)
EPSS history
Timeline
  • 10 AUG 11:51Z
    iio: core: fix uninitialized data in debugfs
    cvelistv5