CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's hwmon subsystem, specifically within the asus_atk0110 driver, where the function atk_ec_present() fails to verify that sub-packages contain elements before accessing them. This oversight can lead to out-of-bounds reads, potentially allowing attackers to exploit malformed firmware packages. Organizations using affected Linux systems, particularly those with ASUS hardware, should prioritize patching to mitigate potential risks associated with this vulnerability.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus_atk0110) Check package count before accessing element atk_ec_present() walks the management group package returned by the GGRP ACPI method and, for each sub-package, reads its first element: id = &obj->package.elements[0]; if (id->type != ACPI_TYPE_INTEGER) without checking that the sub-package is non-empty. ACPICA allocates the element array with exactly package.count entries, so for a sub-package with a zero count this reads past the allocation. The sibling function atk_debugfs_ggrp_open() performs the same access but skips empty packages with a package.count check first. Add the same check to atk_ec_present() so a malformed firmware package cannot trigger an out-of-bounds read.