CyberRota Analysis
AI-GeneratedThe vulnerability in the Linux kernel affects the MIPS architecture, specifically in the `maar_res_walk()` function, which can lead to an out-of-bounds write due to improper array boundary checks. This flaw allows potential attackers to overwrite memory beyond the allocated array, which could result in system instability or exploitation. Organizations using Linux on MIPS systems should prioritize addressing this vulnerability to mitigate risks associated with memory corruption.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: MIPS: mm: Fix out-of-bounds write in maar_res_walk() maar_res_walk() uses wi->num_cfg as the index into the fixed-size wi->cfg array, but checks whether the array is full only after it has filled the selected entry. If walk_system_ram_range() reports more than 16 memory ranges, the overflow call writes one struct maar_config past the end of the array before WARN_ON() prevents num_cfg from advancing. Move the full-array check before taking the array slot and return non-zero when the scratch array is full, so walk_system_ram_range() terminates the walk instead of invoking the callback for further ranges.