Linux Kernel BCM Raspberry Pi Out-of-Bounds Access Vulnerability in Clock Management

A vulnerability in the Linux kernel's clock management for BCM Raspberry Pi has been addressed. The issue stemmed from the 'raspberrypi_discover_clocks()' function, which incorrectly assumed that the identifier for the last clock element was zero. This assumption was flawed, as the data is sourced from the Videocore firmware, which does not guarantee such behavior. The vulnerability could have led to out-of-bounds access. The issue has been resolved by introducing a sentinel element to ensure proper data handling.

Impact

Exploitation of this vulnerability could have resulted in out-of-bounds memory access, potentially leading to memory corruption or other unintended behavior.