Linux Kernel SJA1105 Switch Driver Buffer Overflow Vulnerability

A buffer overflow vulnerability has been identified in the Linux kernel's SJA1105 switch driver. The issue arises in the 'sja1105_setup_devlink_regions()' function, where the 'priv->regions' array is accessed using a negative index of '-1' if an error occurs in 'dsa_devlink_region_create()'. This vulnerability was discovered by the Linux Verification Center using SVACE.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can potentially be exploited to execute arbitrary code or cause a denial-of-service condition.