Linux Kernel SCMI Protocols Enumeration Vulnerability

A vulnerability in the Linux kernel's handling of the ARM SCMI base protocol enumeration has been addressed. The issue arose because the validation of the number of protocols returned by the BASE_DISCOVER_LIST_PROTOCOLS command was flawed. The check used a sum of unsigned integers that could overflow, potentially allowing the validation to be bypassed if the returned value was sufficiently large. The vulnerability has been fixed by improving the validation process to avoid such overflow issues.

Impact

Exploitation of this vulnerability could lead to improper validation of protocol enumeration, allowing for potential manipulation or misrepresentation of the protocols available on the SCMI platform.