CVE-2022-49515

A vulnerability was found in the Linux kernel's CS35L41 driver. The constant CS35L41_NUM_OTP_ELEM is defined as 100 but is used by the arrays otp_map_1 and otp_map_2, which are both expected to contain only 99 elements. This mismatch causes the code to access memory past the array boundaries when accessing an element at the 99th index, resulting in out-of-bounds access, which can lead to system instability, memory corruption, or potential code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.