Kernel memory disclosure via reversed array stride

Out-of-bounds read in the Linux kernel allows local users to disclose kernel memory through a crafted PowerVR device-query ioctl. In pvr_set_uobj_array(), the slow path advances the kernel pointer by the user-supplied stride instead of the object size, causing later copy_to_user operations to read beyond the kernel object array; it also clears padding only for the first element. Access to an Imagination PowerVR render node is required; repeated requests can expose kernel data or trigger a system panic, while systems without PowerVR hardware are unaffected.