Memory Out of Bounds Vulnerability in Linux Kernel by Freescale

CVE-2023-53750

What is CVE-2023-53750?

A vulnerability in the Linux kernel's freescale pinctrl configuration can lead to a memory out of bounds condition when the configuration parameter 'num_configs' is set to 1. Specifically, when an invalid configuration index is accessed, it can trigger a memory access violation, detected by KASAN. This issue highlights the importance of appropriate bounds checking for configuration parameters, especially in scenarios where different configurations are dynamically fetched based on system states.

References