Linux Kernel GPIO Regulator Out-of-Bounds Access Vulnerability

A vulnerability in the Linux kernel's GPIO regulator handling has been addressed. The issue stemmed from an out-of-bounds access to the driver data's GPIO descriptor array. The memory was allocated for only a single pointer, leading to potential out-of-bounds access if the configuration specified more than one GPIO. The vulnerability has been fixed by ensuring that enough memory is allocated to accommodate the specified number of GPIO descriptors. Additionally, the error handling for memory allocation failures has been improved for better readability.

Impact

Exploitation of this vulnerability could lead to out-of-bounds memory access, potentially causing undefined behavior such as memory corruption or application crashes.