Vulnerability in Linux

CVE-2025-40221

In the Linux kernel, the following vulnerability has been resolved: media: pci: mg4b: fix uninitialized iio scan data Fix potential leak of uninitialized stack data to userspace by ensuring that the `scan` structure is zeroed before use.

EPSS: 0.002 (6.1th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 0ab13674a9bd10514486cf1670d71dbd8afec421, 6.7, 0

References