Log in Start free

Vulnerability · Published Feb 28, 2024 · Assigned by Linux

CVE-2020-36786media: [next] staging: media: atomisp: fix memory leak of object flash

Medium 5.5

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.2%top 87.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: media: [next] staging: media: atomisp: fix memory leak of object flash In the case where the call to lm3554_platform_data_func returns an error there is a memory leak on the error return path of object flash. Fix this by adding an error return path that will free flash and rename labels fail2 to fail3 and fail1 to fail2.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux5.10.38-1DEBIAN-CVE-2020-36786
Debian:13linux5.10.38-1DEBIAN-CVE-2020-36786
Debian:14linux5.10.38-1DEBIAN-CVE-2020-36786
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2020-36786
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2020-36786
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2020-36786
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2020-36786
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2020-36786
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2020-36786
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2020-36786
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2020-36786
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2020-36786
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2020-36786
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2020-36786
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2020-36786
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2020-36786
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2020-36786
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2020-36786
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2020-36786
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2020-36786
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2020-36786
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2020-36786
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2020-36786
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2020-36786

Affected products (as reported)

VendorProductVersions
Linux Linux 9289cdf399922a1bd801a8cd946a79581c00a380 – before cc4cc2fb5aaf9adb83c02211eb13b16cfcb7ba649289cdf399922a1bd801a8cd946a79581c00a380 – before 4f0f37d03cde8f4341df8454f9b40a67fda94a339289cdf399922a1bd801a8cd946a79581c00a380 – before 27d2eab69f7da8e94e4751ac5c6d22d8092754849289cdf399922a1bd801a8cd946a79581c00a380 – before 6045b01dd0e3cd3759eafe7f290ed04c957500b1
Linux Linux 5.10

References