The vulnerability in the Linux kernel's Qualcomm gcc-ipq5018 clock driver involves frequency table arrays that were not properly terminated with an empty element. This omission could cause out-of-bound access when functions such as qcom_find_freq() or qcom_find_freq_floor() traverse these arrays. The issue is classified under CWE-129 (Improper Validation of Array Index). The fix involves adding the missing terminating entry to the frequency table arrays to prevent potential out-of-bound access.

The vulnerability can cause out-of-bound access in kernel memory when traversing frequency tables, potentially leading to denial of service or system instability. The CVSS score of 5.5 (medium severity) reflects limited impact with no confidentiality or integrity loss, but with potential availability impact. There are no known exploits in the wild.

A fix has been implemented in the Linux kernel to add the missing terminating entry to the frequency table arrays in the Qualcomm gcc-ipq5018 clock driver. Users should update their Linux kernel to a version that includes this fix once it is released. Patch status is not explicitly confirmed in the provided data; therefore, check the official Linux kernel advisories or vendor updates for the exact fixed versions and apply the update accordingly.