Linux Kernel Samsung Clock Driver Out-of-Bounds Read Vulnerability

A vulnerability in the Samsung clock driver of the Linux kernel has been identified, where an out-of-bounds read occurs in the 'samsung_clk_init' function. This issue arises because the function dereferences 'ctx->clk_data.hws' before properly initializing 'ctx->clk_data.num' with the number of clocks. The vulnerability can lead to a panic, as detected by the Undefined Behavior Sanitizer (UBSAN), indicating an array index out-of-bounds error.

Impact

Exploitation of this vulnerability causes a kernel panic due to an out-of-bounds array access, which can lead to a denial of service by crashing the system.