Linux Kernel Visconti Clock Driver Array Overflow Vulnerability in Clock Gate Registration

An array overflow vulnerability has been addressed in the Linux kernel's Visconti clock driver. The issue arose in the function 'visconti_clk_register_gates()', where a reset function's absence was indicated by -1. This value was incorrectly stored in an 8-bit unsigned integer, causing the condition check to always evaluate as true. As a result, the vulnerability led to an out-of-bounds access in the clock registration process.

Impact

Exploitation of this vulnerability could lead to memory corruption by allowing out-of-bounds access, potentially causing a crash or arbitrary code execution.