[PATCH] firmware: arm_scmi: Fix OOB in scmi_power_name_get()
Dan Carpenter
error27 at gmail.com
Fri May 15 03:28:19 PDT 2026
On Fri, May 15, 2026 at 11:59:15AM +0200, Geert Uytterhoeven wrote:
> scmi_power_name_get() does not validate the domain number passed by the
> external caller, which may lead to an out-of-bounds access.
>
Is an external caller an out of tree caller? So far as I can see this
is only called by scmi_pm_domain_probe().
scmi_pd->name = power_ops->name_get(ph, i);
where i < num_domains.
regards,
dan carpenter
More information about the linux-arm-kernel
mailing list