VDB
CVE-2020-36786
CVE-2020-36786
PUBLISHED
CVSS 5.5 MEDIUM
In the Linux kernel, the following vulnerability has been resolved: media: [next] staging: media: atomisp: fix memory leak of object flash In the case where the call to lm3554_platform_data_func returns an error there is a memory leak on the error return path of object flash. Fix this by adding an error return path that will free flash and rename labels fail2 to fail3 and fail1 to fail2.
EPSS 0.22% · 12.6th percentile
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.22%
12.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | 6.2.0-1015.15~22.04.1, *, * |
| Ubuntu:20.04:LTS | linux-riscv | 5.4.0-33.37, 5.4.0-27.31, 5.4.0-36.41 |
| Ubuntu:20.04:LTS | linux-azure-fde | 5.4.0-1086.91+cvm1.1, 5.4.0-1085.90+cvm2.1, * |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | *, 5.19.0-1018.20~22.04.1, 5.19.0-1016.18~22.04.1 |
| Ubuntu:20.04:LTS | linux-riscv-5.8 | 5.8.0-22.24~20.04.1, 5.8.0-26.28~20.04.1, * |
| Ubuntu:20.04:LTS | linux-hwe-5.13 | 5.13.0-25.26~20.04.1, 5.13.0-22.22~20.04.1, 5.13.0-21.21~20.04.1 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | 6.0.0-1006.6, 6.0.0-1008.8, 6.0.0-1011.11 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | 5.19.0-1026.29~22.04.1.1, *, 5.19.0-1027.30~22.04.2.1 |
| Ubuntu:20.04:LTS | linux-gke | 5.4.0-1059.62, 5.4.0-1033.35, 5.4.0-1080.86 |
| Ubuntu:18.04:LTS | linux-azure | 4.15.0-1014.14, 4.15.0-1037.39, 5.0.0-1031.33 |
| Ubuntu:18.04:LTS | linux-hwe-edge | 5.3.0-22.24~18.04.1, 5.3.0-23.25~18.04.2, 5.3.0-24.26~18.04.2 |
| Ubuntu:20.04:LTS | linux-gcp-5.13 | 5.13.0-1024.29~20.04.1, 5.13.0-1019.23~20.04.1, 5.13.0-1015.18~20.04.1 |
| Ubuntu:18.04:LTS | linux-hwe | 5.3.0-75.71, 0, 4.18.0-13.14~18.04.1 |
| Ubuntu:20.04:LTS | linux-gke-5.15 | 5.15.0-1033.38~20.04.1, 5.15.0-1032.37~20.04.1, 5.15.0-1029.34~20.04.1 |
| Ubuntu:20.04:LTS | linux-gcp-5.8 | *, 5.8.0-1039.41, 5.8.0-1038.40~20.04.1 |
| Ubuntu:20.04:LTS | linux-oem-5.10 | 5.10.0-1011.12, 5.10.0-1017.18, 5.10.0-1055.58 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | *, 6.2.0-1017.17~22.04.1, 6.2.0-1016.16~22.04.1 |
| Ubuntu:18.04:LTS | linux-oem | 4.15.0-1076.86, 4.15.0-1101.112, 4.15.0-1102.113 |
| Ubuntu:18.04:LTS | linux-gcp-5.3 | 5.3.0-1018.19~18.04.1, 5.3.0-1017.18~18.04.1, 5.3.0-1016.17~18.04.1 |
| Ubuntu:18.04:LTS | linux-azure-5.3 | 5.3.0-1022.23~18.04.1, 5.3.0-1028.29~18.04.1, 5.3.0-1031.32~18.04.1 |
…and 44 more
Timeline
- Feb 28, 2024 CVE Published
- Feb 29, 2024 EPSS Score
- Mar 27, 2024 EPSS Score
- Apr 22, 2024 EPSS Score
- May 19, 2024 EPSS Score
- Jun 15, 2024 EPSS Score
- Jul 11, 2024 EPSS Score
- Aug 7, 2024 EPSS Score
- Sep 3, 2024 EPSS Score
- Sep 30, 2024 EPSS Score
- Oct 26, 2024 EPSS Score
- Nov 22, 2024 EPSS Score
References
- https://ubuntu.com/security/CVE-2020-36786 third-party-advisory
- https://git.kernel.org/linus/6045b01dd0e3cd3759eafe7f290ed04c957500b1 third-party-advisory
- https://git.kernel.org/stable/c/cc4cc2fb5aaf9adb83c02211eb13b16cfcb7ba64 third-party-advisory
- https://git.kernel.org/stable/c/4f0f37d03cde8f4341df8454f9b40a67fda94a33 third-party-advisory
- https://git.kernel.org/stable/c/27d2eab69f7da8e94e4751ac5c6d22d809275484 third-party-advisory
- https://git.kernel.org/stable/c/6045b01dd0e3cd3759eafe7f290ed04c957500b1 third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2020-36786 third-party-advisory