Linux Kernel Objtool Out-of-Bounds Stack Access Vulnerability in NVM Express Management

A vulnerability allowing out-of-bounds stack access has been identified in the Linux kernel's NVM Express (NVMe) management tool, Objtool. The issue arises in the 'nvmet_ctrl_state_show()' function, where the iteration code incorrectly processes seven entries of the 'csts_state_names[]' array, which only contains six sparse entries. This mismatch can lead to unintended memory access, potentially causing a stack read beyond the array's bounds. The vulnerability triggers a warning in the kernel's Undefined Behavior Sanitizer (UBSAN) mode, indicating an unexpected end of section.

Impact

Exploitation of this vulnerability could lead to out-of-bounds memory access, allowing for potential manipulation or corruption of stack data.