CVE-2024-26711

iio: adc: ad4130: zero-initialize clock init data

Description

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad4130: zero-initialize clock init data The clk_init_data struct does not have all its members initialized, causing issues when trying to expose the internal clock on the CLK pin. Fix this by zero-initializing the clk_init_data struct.

Category

5.5
CVSS
Severity: Medium
CVSS 3.1 •
EPSS 0.01%
Affected: Linux Linux
Affected: Linux Linux
Published at:
Updated at:

References

Link Tags
https://git.kernel.org/stable/c/0e0dab37750926d4fb0144edb1c1ea0612fea273 patch
https://git.kernel.org/stable/c/02876e2df02f8b17a593d77a0a7879a8109b27e1 patch
https://git.kernel.org/stable/c/a22b0a2be69a36511cb5b37d948b651ddf7debf3 patch

Frequently Asked Questions

What is the severity of CVE-2024-26711?
CVE-2024-26711 has been scored as a medium severity vulnerability.
How to fix CVE-2024-26711?
To fix CVE-2024-26711, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2024-26711 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2024-26711 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2024-26711?
CVE-2024-26711 affects Linux Linux, Linux Linux.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.