CVE-2024-57906

CVE-2024-57906 is an information leak vulnerability in the Linux kernel's ti-ads8688 Analog-to-Digital Converter (ADC) driver. It occurs because the 'buffer' array, used to send data to userspace from a triggered buffer, is not properly initialized, leading to uninitialized information being exposed. This vulnerability affects Linux and the Linux kernel. Rated with a CVSS score of 7.1 (High), the vulnerability has a local attack vector, low attack complexity, and requires low privileges, potentially leading to high confidentiality impact and high availability impact. It is classified as CWE-908 (Improper Initialization). There is currently no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, which is typical for the majority of reported vulnerabilities.