Linux Kernel PTP OCP Debugfs Summary Output Vulnerability Leading to NULL Pointer Dereference

A vulnerability in the Linux kernel's Precision Time Protocol (PTP) component has been addressed. The issue arose in the debugfs summary output, which could inadvertently access uninitialized elements in the freq_in and signal_out arrays. This uninitialized access led to NULL pointer dereferences, causing a kernel Oops (page_fault_oops) error. The vulnerability has been resolved by introducing fields to track the number of initialized elements in the arrays, capping the count at four per array. The summary output functions have been modified to adhere to these limits, thereby preventing out-of-bounds access and ensuring safe array management.

Impact

Exploitation of this vulnerability could lead to a NULL pointer dereference, causing a kernel Oops error and potentially disrupting system operations.