Linux Kernel Out-of-Bounds Vulnerability in Software Node Reference Handling

A vulnerability in the Linux kernel's software node management has been addressed. The issue was related to an out-of-bounds (OOB) check in the function 'software_node_get_reference_args()'. This function attempts to access the 'index-th' element of a property, requiring a minimum of '(index + 1) * sizeof(*ref)' bytes. However, the existing OOB check did not reliably ensure this requirement, potentially leading to out-of-bounds access for malformed properties. The vulnerability has been fixed by improving the OOB check to '((index + 1) * sizeof(*ref) > prop->length)'.

Impact

Exploitation of this vulnerability could lead to out-of-bounds memory access, which may cause memory corruption or allow for arbitrary code execution.