CVE-2023-53768

An off-by-one style bug exists in regmap_add_irq_chip_fwnode() where the allocation loop uses num_config_regs instead of num_config_bases as its termination condition. When num_config_regs exceeds num_config_bases, memory beyond the allocated row pointer array gets overwritten. KASAN caught this corruption manifesting as crashes on Qualcomm db845c hardware.

Devices using regmap-irq with specific IRQ type register configurations are susceptible. The bug requires a particular relationship between config_bases and config_regs counts, limiting exposure to certain hardware platforms.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.