01 Record

CVE-2024-57906

iio: adc: ti-ads8688: fix information leak in triggered buffer

HighPUBLISHEDCNA: Linux

CNA base score7.1 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

View raw JSON

02 Description

iio: adc: ti-ads8688: fix information leak in triggered buffer

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.22% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 12.6% of scored records. A rank, not a probability.

NVD base score

7.1 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-01-19 11:52Z1 YR AGO

Last updated

2026-05-23 15:56Z3 MO AGO

Reserved

2025-01-19

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.1)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weaknesses

CWE-908Use of Uninitialized ResourceBase

Data version

5.2

Document digest

9aa4eb8c37112abe630dca77c078a508fd3b7917275862bfd24dec69d97c9be0

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux26aa12ef64ee997d293659bbf645c6df99fb73e5 to < 1c80a0985a9a14f33dbf63cd703ca010f094f878, c923e9effe50b0a83e74e1940afbecef5456bfda to < 3bf8d1e87939b8a19c9b738564fddf5b73322f2f, 61fa5dfa5f52806f5ce37a0ba5712c271eb22f98 to < aae96738006840533cf147ffd5f41830987f21c5, 61fa5dfa5f52806f5ce37a0ba5712c271eb22f98 to < ebe2672bc42a0dfe31bb539f8ce79d024aa7e46d, 61fa5dfa5f52806f5ce37a0ba5712c271eb22f98 to < 455df95eb8f24a37abc549d6738fc8ee07eb623b, 61fa5dfa5f52806f5ce37a0ba5712c271eb22f98 to < 485570ed82b7a6bb109fa1d0a79998e21f7f4c73, 61fa5dfa5f52806f5ce37a0ba5712c271eb22f98 to < 2a7377ccfd940cd6e9201756aff1e7852c266e69, 91664385e6c49f1e961e822f2d024776ac22102a, a65024fc5754f2fca73541373a2502bef603565b, 3563bb70d6baa0a5e8082397e13f62f26053c04d, 5.4.132 to < 5.4.290, 5.10.50 to < 5.10.234, 4.19.198 to < 4.20, 5.12.17 to < 5.13, 5.13.2 to < 5.14, 5.14—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/1c80a0985a9a14f33dbf63cd703ca010f094f878
git.kernel.orghttps://git.kernel.org/stable/c/3bf8d1e87939b8a19c9b738564fddf5b73322f2f
git.kernel.orghttps://git.kernel.org/stable/c/aae96738006840533cf147ffd5f41830987f21c5
git.kernel.orghttps://git.kernel.org/stable/c/ebe2672bc42a0dfe31bb539f8ce79d024aa7e46d
git.kernel.orghttps://git.kernel.org/stable/c/455df95eb8f24a37abc549d6738fc8ee07eb623b
git.kernel.orghttps://git.kernel.org/stable/c/485570ed82b7a6bb109fa1d0a79998e21f7f4c73
git.kernel.orghttps://git.kernel.org/stable/c/2a7377ccfd940cd6e9201756aff1e7852c266e69
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00002.html

01 Record index

CVE-2024-57906

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2024-57906

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References