Answer in brief
CVE-2026-68089 records a Unknown severity vulnerability in iio: core: fix uninitialized data in debugfs. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=6d5dd486c715908b5a6ed02315a15ff044a91025 <e166a8cfb28a3d0da260dd70cae274eb8c7cec8d || >=6d5dd486c715908b5a6ed02315a15ff044a91025 <89fbd3e32dffb6227f936a9578e6eb4632aa4580 || >=6d5dd486c715908b5a6ed02315a15ff044a91025 <ab92ed206d41fd171ebd37bc46360d9f2140d043 | e166a8cfb28a3d0da260dd70cae274eb8c7cec8d, 89fbd3e32dffb6227f936a9578e6eb4632aa4580, ab92ed206d41fd171ebd37bc46360d9f2140d043 |
| Linux/Linuxgeneric | 6.15 | Not reported |
Published upstream
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 10, 2026
In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If *ppos is non-zero then simple_write_to_buffer() will not initialize the start of buf[]. Non zero values for *ppos aren't going to work anyway. Test for them at the start of the function and return -EINVAL.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-68089 records a Unknown severity vulnerability in iio: core: fix uninitialized data in debugfs. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=6d5dd486c715908b5a6ed02315a15ff044a91025 <e166a8cfb28a3d0da260dd70cae274eb8c7cec8d || >=6d5dd486c715908b5a6ed02315a15ff044a91025 <89fbd3e32dffb6227f936a9578e6eb4632aa4580 || >=6d5dd486c715908b5a6ed02315a15ff044a91025 <ab92ed206d41fd171ebd37bc46360d9f2140d043 | e166a8cfb28a3d0da260dd70cae274eb8c7cec8d, 89fbd3e32dffb6227f936a9578e6eb4632aa4580, ab92ed206d41fd171ebd37bc46360d9f2140d043 |
| Linux/Linuxgeneric | 6.15 | Not reported |
Published upstream
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 10, 2026
In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If *ppos is non-zero then simple_write_to_buffer() will not initialize the start of buf[]. Non zero values for *ppos aren't going to work anyway. Test for them at the start of the function and return -EINVAL.
Quoted source text, attributed separately from HOL analysis.