CVE-2025-40221

Published: December 6, 2025Last modified: December 6, 2025

Description

In the Linux kernel, the following vulnerability has been resolved: media: pci: mg4b: fix uninitialized iio scan data Fix potential leak of uninitialized stack data to userspace by ensuring that the `scan` structure is zeroed before use.

Status

ProductReleasePackageStatus
Alpaquita Linux23 LTSlinux-ltsNot affected (6.1.33-r0)
25 LTSlinux-ltsFixed (6.12.57-r0)
Streamlinux-ltsFixed (6.12.55-r0)

References

ON THIS PAGE