CVE-2022-49551: 
Linux Kernel vulnerability analysis and mitigation

In the Linux kernel, a vulnerability (CVE-2022-49551) was discovered in the ISP1760 USB driver. The issue involves an out-of-bounds array access in the driver's regmap fields for different ISP1760 variants. The vulnerability was identified when running the driver through KASAN (Kernel Address Sanitizer) (Kernel Git).

The vulnerability occurs in a loop that reads regmap fields for ISP1760 variants using the condition for (i = 0; i < HC_FIELD_MAX; i++). The arrays isp1760_hc_reg_fields[], isp1763_hc_reg_fields[], isp1763_hc_volatile_ranges[], and isp1763_dc_volatile_ranges[] are dynamically sized during compilation, but the loop expects them to be at least HC_FIELD_MAX - 1 long. This mismatch leads to an out-of-bounds read of size 20 at a specific memory address, as detected by KASAN (Kernel Git).

The out-of-bounds array access could lead to memory corruption and potential system instability. The vulnerability was discovered during testing with KASAN, which detected unauthorized memory access beyond allocated array boundaries (Kernel Git).

The issue has been fixed by adding empty assignments to the [HC_FIELD_MAX] and [DC_FIELD_MAX] array members at the end of each affected array. This solution makes the arrays one member longer than needed, preventing overwriting of memory at [HC_FIELD_MAX - 1]. The fix was implemented in a patch that has been merged into the Linux kernel (Kernel Git).