CVE-2020-36786

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2020-36786
In the Linux kernel, the following vulnerability has been resolved: media: [next] staging: media: atomisp: fix memory leak of object flash In the case where the call to lm3554_platform_data_func returns an error there is a memory leak on the error return path of object flash. Fix this by adding an error return path that will free flash and rename labels fail2 to fail3 and fail1 to fail2.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/27d2eab69f7da8e94e4751ac5c6d22d809275484 Patch
https://git.kernel.org/stable/c/4f0f37d03cde8f4341df8454f9b40a67fda94a33 Patch
https://git.kernel.org/stable/c/6045b01dd0e3cd3759eafe7f290ed04c957500b1 Patch
https://git.kernel.org/stable/c/cc4cc2fb5aaf9adb83c02211eb13b16cfcb7ba64 Patch
https://git.kernel.org/stable/c/27d2eab69f7da8e94e4751ac5c6d22d809275484 Patch
https://git.kernel.org/stable/c/4f0f37d03cde8f4341df8454f9b40a67fda94a33 Patch
https://git.kernel.org/stable/c/6045b01dd0e3cd3759eafe7f290ed04c957500b1 Patch
https://git.kernel.org/stable/c/cc4cc2fb5aaf9adb83c02211eb13b16cfcb7ba64 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

06 Dec 2024, 15:59

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/27d2eab69f7da8e94e4751ac5c6d22d809275484 - () https://git.kernel.org/stable/c/27d2eab69f7da8e94e4751ac5c6d22d809275484 - Patch
References () https://git.kernel.org/stable/c/4f0f37d03cde8f4341df8454f9b40a67fda94a33 - () https://git.kernel.org/stable/c/4f0f37d03cde8f4341df8454f9b40a67fda94a33 - Patch
References () https://git.kernel.org/stable/c/6045b01dd0e3cd3759eafe7f290ed04c957500b1 - () https://git.kernel.org/stable/c/6045b01dd0e3cd3759eafe7f290ed04c957500b1 - Patch
References () https://git.kernel.org/stable/c/cc4cc2fb5aaf9adb83c02211eb13b16cfcb7ba64 - () https://git.kernel.org/stable/c/cc4cc2fb5aaf9adb83c02211eb13b16cfcb7ba64 - Patch
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-401

21 Nov 2024, 05:30

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/27d2eab69f7da8e94e4751ac5c6d22d809275484 - () https://git.kernel.org/stable/c/27d2eab69f7da8e94e4751ac5c6d22d809275484 -
References () https://git.kernel.org/stable/c/4f0f37d03cde8f4341df8454f9b40a67fda94a33 - () https://git.kernel.org/stable/c/4f0f37d03cde8f4341df8454f9b40a67fda94a33 -
References () https://git.kernel.org/stable/c/6045b01dd0e3cd3759eafe7f290ed04c957500b1 - () https://git.kernel.org/stable/c/6045b01dd0e3cd3759eafe7f290ed04c957500b1 -
References () https://git.kernel.org/stable/c/cc4cc2fb5aaf9adb83c02211eb13b16cfcb7ba64 - () https://git.kernel.org/stable/c/cc4cc2fb5aaf9adb83c02211eb13b16cfcb7ba64 -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: media: [siguiente] staging: media: atomisp: corrige la pérdida de memoria del flash del objeto En el caso de que la llamada a lm3554_platform_data_func devuelva un error, hay una pérdida de memoria en la ruta de retorno del error del destello del objeto. Solucione este problema agregando una ruta de retorno de error que liberará el flash y cambiará el nombre de las etiquetas de falla2 a falla3 y de falla1 a falla2.

28 Feb 2024, 09:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-28 09:15

Updated : 2024-12-06 15:59

NVD link : CVE-2020-36786

Mitre link : CVE-2020-36786

CVE.ORG link : CVE-2020-36786

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime