Linux Kernel Array Index Out-of-Bounds Vulnerability in pvrusb2 Media Driver

An array index out-of-bounds vulnerability has been identified in the Linux kernel's pvrusb2 media driver. The issue arises because the unit_number is initialized to -1 and, if the initialization table walk fails, this value remains unchanged. The code then uses this unvalidated value for array indexing, leading to potential out-of-bounds access. The vulnerability was reported by Syzbot.

Impact

Exploitation of this vulnerability could lead to out-of-bounds memory access, which may cause a denial of service or potentially allow for arbitrary code execution.