CVE-2026-68089 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If *ppos is non-zero then simple_write_to_buffer() will not initialize the start of buf[]. Non zero values for *ppos aren't going to work anyway. Test for them at the start of the function and return -EINVAL.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Kernel

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors	Products

References

Link	Providers
https://git.kernel.org/stable/c/89fbd3e32dffb6227f936a9578e6eb4632aa4580
https://git.kernel.org/stable/c/ab92ed206d41fd171ebd37bc46360d9f2140d043
https://git.kernel.org/stable/c/e166a8cfb28a3d0da260dd70cae274eb8c7cec8d

History

Mon, 10 Aug 2026 19:45:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-457

Mon, 10 Aug 2026 12:00:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If ppos is non-zero then simple_write_to_buffer() will not initialize the start of buf[]. Non zero values for ppos aren't going to work anyway. Test for them at the start of the function and return -EINVAL.
Title		iio: core: fix uninitialized data in debugfs
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/89fbd3e32dffb6227f936a9578e6eb4632aa4580 https://git.kernel.org/stable/c/ab92ed206d41fd171ebd37bc46360d9f2140d043 https://git.kernel.org/stable/c/e166a8cfb28a3d0da260dd70cae274eb8c7cec8d

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-10T11:51:43.963Z

Updated: 2026-08-10T11:51:43.963Z

Reserved: 2026-07-30T09:28:09.367Z

Link: CVE-2026-68089

Vulnrichment

No data.

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-08-10T19:30:17Z

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-68089", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-30T09:28:09.367Z", "datePublished": "2026-08-10T11:51:43.963Z", "dateUpdated": "2026-08-10T11:51:43.963Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-10T11:51:43.963Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: core: fix uninitialized data in debugfs\n\nIf *ppos is non-zero then simple_write_to_buffer() will not initialize\nthe start of buf[]. Non zero values for *ppos aren't going to work\nanyway. Test for them at the start of the function and return -EINVAL."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iio/industrialio-core.c"], "versions": [{"version": "6d5dd486c715908b5a6ed02315a15ff044a91025", "lessThan": "e166a8cfb28a3d0da260dd70cae274eb8c7cec8d", "status": "affected", "versionType": "git"}, {"version": "6d5dd486c715908b5a6ed02315a15ff044a91025", "lessThan": "89fbd3e32dffb6227f936a9578e6eb4632aa4580", "status": "affected", "versionType": "git"}, {"version": "6d5dd486c715908b5a6ed02315a15ff044a91025", "lessThan": "ab92ed206d41fd171ebd37bc46360d9f2140d043", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iio/industrialio-core.c"], "versions": [{"version": "6.15", "status": "affected"}, {"version": "0", "lessThan": "6.15", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.39", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.4", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2-rc1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15", "versionEndExcluding": "6.18.39"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15", "versionEndExcluding": "7.1.4"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15", "versionEndExcluding": "7.2-rc1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/e166a8cfb28a3d0da260dd70cae274eb8c7cec8d"}, {"url": "https://git.kernel.org/stable/c/89fbd3e32dffb6227f936a9578e6eb4632aa4580"}, {"url": "https://git.kernel.org/stable/c/ab92ed206d41fd171ebd37bc46360d9f2140d043"}], "title": "iio: core: fix uninitialized data in debugfs", "x_generator": {"engine": "bippy-1.2.0"}}}}