Linux Kernel Out-of-Bounds Memory Access Vulnerability in Venus HFI Parser

A vulnerability allowing out-of-bounds memory access has been identified in the Linux kernel's Venus HFI parser. The issue arises because the 'words_count' variable, which indicates the total number of words in the payload, can lead to memory access beyond the intended limits when it reaches the last word. This out-of-bounds access can potentially be exploited. The vulnerability has been addressed by refactoring the HFI packet parsing logic. The updated parsing utility now accurately reports the size of the data consumed, allowing for a proper calculation of remaining bytes before parsing the payload, thereby eliminating the possibility of out-of-bounds access.

Impact

Exploitation of this vulnerability could lead to unauthorized memory access, potentially allowing for arbitrary code execution or causing a denial-of-service condition.