The vulnerability arises from the Linux kernel’s mt6358_read_imp function, which passes the variable val_v to regmap_read without verifying the return code. When a bus read fails, val_v remains uninitialized and contains random stack data. This uninitialized value is then reported as an ADC measurement, potentially leaking arbitrary stack content and compromising measurement integrity (CWE-824).

All installations of the Linux kernel that include the mt6358 or mt6359 ADC driver are affected until the patch is applied. The defective code is present in kernel versions containing the unchecked read in mt6358_read_imp; the commit that fixes the issue initializes val_v to zero and is available in current stable releases.

Based on the description, the flaw appears to be local; an attacker would need to trigger an ADC read sequence on a vulnerable kernel instance. The EPSS score is below 1 % and the vulnerability is not listed in the CISA KEV catalog, suggesting a low likelihood of exploitation. Nevertheless, the potential for arbitrary stack data leakage and inaccurate sensor values means the confidentiality and integrity impacts warrant prompt remediation.