Linux Kernel PDS Core Command Handling Vulnerability Leading to Information Disclosure and Denial-of-Service

A vulnerability in the Linux kernel's PDS core command handling can lead to information disclosure and a potential denial-of-service. When the firmware does not support the PDS_CORE_CMD_FW_CONTROL command, the driver may either display incorrect information or crash. This issue arises because a stack variable is not properly initialized, causing the driver to access out-of-bounds array elements. The vulnerability can be triggered by executing the 'devlink dev info' command when the firmware command is unsupported.

Impact

Exploitation of this vulnerability can cause the system to crash or disrupt normal operations by causing a denial-of-service condition.