Linux Kernel Out-of-Bounds Read Vulnerability in MSM8916 Devices

A vulnerability in the Linux kernel's handling of SOCINFO data on MSM8916 devices can lead to an out-of-bounds read of the serial number. The issue arises because the firmware version 0.8 does not support the serial number field, yet the kernel incorrectly exposes a constant serial number by reading beyond the intended bounds. This flaw allows access to arbitrary data following the SOCINFO structure in shared memory.

Impact

Exploitation of this vulnerability causes an out-of-bounds read, potentially leading to information disclosure by exposing sensitive data from memory.