The ITG3200 gyro driver for the Linux kernel incorrectly writes I2C read data into the stack location of the function’s own pointer variable instead of into the caller’s buffer, a flaw identified as CWE-908 that results in an information disclosure classified as CWE-200. The 8 bytes of data written by i2c_transfer() are lost on return, yet the uninitialized stack contents are subsequently copied to user space through the triggered buffer exposed by /dev/iio:deviceX. As a result, an information leak occurs—uninitialized kernel stack data reaches userspace—while the sensor also reports no valid gyroscope or temperature measurements due to this improper memory handling.

All Linux kernel installations that include the iio gyro driver for the ITG3200 sensor are affected. Because no specific version range is listed, any kernel version before the patch that implements the change in the driver should be considered vulnerable. The issue appears in the gyroscope subsystem of the kernel device driver infrastructure, not tied to any particular vendor beyond the generic Linux kernel.

The supplied EPSS score is below 1 %, indicating a very low likelihood of current exploitation. The vulnerability is not listed in CISA’s KEV catalog. The attack vector is inferred to be local or physical, as the affected driver is accessed through the /dev/iio device interface and requires the sensor to be triggered. An attacker with local access to the device files can trigger the buffer and capture the leaked stack data, but remote exploitation would be difficult without additional privilege escalation.