In Linux kernels, the Industrial I/O pressure driver for BMP580 sensors contains a stack leak; the handler allocates a small buffer without zero‑initialization and copies three bytes of sensor data into each 32‑bit field. The uninitialized high byte of the temperature and pressure values remains on the stack and is exposed to userspace on each scan. The vulnerability results in local leaking of residual kernel stack data, exposing sensitive information without affecting control flow or privileges. The weakness corresponds to CWE‑908, a local information disclosure.

Any Linux kernel that has not incorporated the commit adding zero‑initialization to the bmp580 trigger handler is vulnerable. System administrators should verify whether their running kernel includes the source changes shown in the linked Git repository commits, and apply any kernel release that contains the fix.

The EPSS score is less than 1%, and the issue is not listed in CISA’s KEV catalog, indicating a low probability of widespread exploitation. An attacker with local access who can read the sensor device node can trigger the handler, capturing leaked stack bytes each time a measurement is requested. The attack does not require elevated privileges or network access; it is a local attack vector. Consequently, the risk is confined to the disclosure of kernel stack contents, with limited impact beyond information leakage.