CVE-2024-39462

Commit f316cdff8d67 marked the `hws` field of the `clk_hw_onecell_data` structure with the `__counted_by` annotation, which informs the bounds sanitizer mechanism about the number of elements in the array. In the `clk_dvp_probe()` function, the `->num` field (storing the number of elements) was assigned only after the first access to the `->hws` array, which causes the number of elements to be zero at the time of access. This results in triggering a UBSAN warning about array-index-out-of-bounds access on every access before counter initialization. The fix involves moving the initialization of `->num` before the first reference to `->hws`.

An attacker or malicious code able to trigger the appropriate path in the driver may lead to uncontrolled resource consumption or system instability; in extreme cases, it is possible to compromise the confidentiality, integrity and availability of the system, which is reflected in the CVSS vector (C:H/I:H/A:H).

Patches available from the manufacturer should be applied in accordance with the references (commits: 0dc913217fb7, 9368cdf90f52, a1dd92fca0d6 in the stable branches of Linux Kernel available at git.kernel.org addresses indicated in the references).

Linux Kernel — versions indicated in the manufacturer's references (driver drivers/clk/bcm/clk-bcm2711-dvp.c); affects platforms based on Broadcom BCM2711 (e.g., Raspberry Pi 4).