Linux Kernel OPP Buffer Overflow Vulnerability in Frequency Index Handling

A buffer overflow vulnerability has been addressed in the Linux kernel's OPP (Operating Performance Points) management. The issue arose in the '_read_freq()' function, where the frequency index was not properly validated before being used. This lack of validation could lead to reading a frequency value outside the bounds of the 'opp->rates[]' array, particularly when the indexed variants of frequency lookup functions were used. The vulnerability has been mitigated by adding an index check to the assert function, ensuring that the frequency index is valid before accessing the array.

Impact

Exploitation of this vulnerability could lead to a buffer overflow, potentially allowing for arbitrary code execution or causing a denial-of-service condition by crashing the system.