Linux Kernel ims-pcu Input Validation Vulnerability Leading to Memory Corruption

A vulnerability in the Linux kernel's ims-pcu component allows for memory corruption due to improper input validation. The issue arises in the ims_pcu_flash_firmware() function, where the 'len' variable, sourced from the firmware, is not adequately checked before being used in a memcpy operation. This lack of validation can lead to memory corruption if the 'len' value is excessively large.

Impact

Exploitation of this vulnerability could result in memory corruption, potentially leading to undefined behavior such as arbitrary code execution or causing a system crash.