Linux Kernel Pinctrl AT91 Out-of-Bounds Access Vulnerability

A vulnerability in the Linux kernel's pinctrl AT91 component could lead to out-of-bounds access. The issue arises in the at91_gpio_probe() function, which fails to verify the availability of a given OF alias before using it as an index for the gpio_chips array. This oversight could result in accessing invalid memory locations. Additionally, the BUG() macro, which could catch such errors, can be omitted during compilation, allowing the issue to persist unchecked.

Impact

Exploitation of this vulnerability could lead to out-of-bounds memory access, potentially causing memory corruption or allowing for arbitrary code execution.