CyberRota Analysis
AI-GeneratedThe vulnerability in the Linux kernel affects the `scmi_power_name_get()` function, which fails to validate the domain number provided by external callers, potentially leading to out-of-bounds access. This flaw could allow attackers to exploit the kernel, resulting in unauthorized access or system instability. Organizations using Linux systems, particularly those relying on the SCMI (System Control and Management Interface), should prioritize applying the patch to mitigate potential risks.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix OOB in scmi_power_name_get() scmi_power_name_get() does not validate the domain number passed by the external caller, which may lead to an out-of-bounds access. Fix this by returning "unknown" for invalid domains, like scmi_reset_name_get() does.