NVD Vulnerability Detail

Search Exploit, PoC

Exploit DB

NVD脆弱性検索トップ

->

NVD Vulnerability Detail

CVE-2020-36786

Summary	In the Linux kernel, the following vulnerability has been resolved: media: [next] staging: media: atomisp: fix memory leak of object flash In the case where the call to lm3554_platform_data_func returns an error there is a memory leak on the error return path of object flash. Fix this by adding an error return path that will free flash and rename labels fail2 to fail3 and fail1 to fail2.
Publication Date	Feb. 28, 2024, 6:15 p.m.
Registration Date	Feb. 29, 2024, 10:01 a.m.
Last Update	Nov. 21, 2024, 2:30 p.m.

Related information, measures and tools

No	URL	refsource	タグ
1	https://git.kernel.org/stable/c/27d2eab69f7da8e94e4751ac5c6d22d809275484
2	https://git.kernel.org/stable/c/27d2eab69f7da8e94e4751ac5c6d22d809275484
3	https://git.kernel.org/stable/c/4f0f37d03cde8f4341df8454f9b40a67fda94a33
4	https://git.kernel.org/stable/c/4f0f37d03cde8f4341df8454f9b40a67fda94a33
5	https://git.kernel.org/stable/c/6045b01dd0e3cd3759eafe7f290ed04c957500b1
6	https://git.kernel.org/stable/c/6045b01dd0e3cd3759eafe7f290ed04c957500b1
7	https://git.kernel.org/stable/c/cc4cc2fb5aaf9adb83c02211eb13b16cfcb7ba64
8	https://git.kernel.org/stable/c/cc4cc2fb5aaf9adb83c02211eb13b16cfcb7ba64

Common Vulnerabilities List

JVN Vulnerability Information

Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性

Title	Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性
Summary	Linux の Linux Kernel には、有効期限後のメモリの解放の欠如に関する脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Sept. 2, 2020, midnight
Registration Date	Dec. 12, 2024, 3:58 p.m.
Last Update	Dec. 12, 2024, 3:58 p.m.

Affected System

Linux

Linux Kernel 5.10 以上 5.10.37 未満

Linux Kernel 5.11 以上 5.11.21 未満

Linux Kernel 5.12 以上 5.12.4 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2020-36786	https://www.cve.org/CVERecord?id=CVE-2020-36786
National Vulnerability Database (NVD)
2	CVE-2020-36786	https://nvd.nist.gov/vuln/detail/CVE-2020-36786

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-401	https://cwe.mitre.org/data/definitions/401.html

ベンダー情報

No	Name	URL
Kernel.org git repositories
1	media: [next] staging: media: atomisp: fix memory leak of object flash (27d2eab)	https://git.kernel.org/stable/c/27d2eab69f7da8e94e4751ac5c6d22d809275484
2	media: [next] staging: media: atomisp: fix memory leak of object flash (4f0f37d)	https://git.kernel.org/stable/c/4f0f37d03cde8f4341df8454f9b40a67fda94a33
3	media: [next] staging: media: atomisp: fix memory leak of object flash (6045b01)	https://git.kernel.org/stable/c/6045b01dd0e3cd3759eafe7f290ed04c957500b1
4	media: [next] staging: media: atomisp: fix memory leak of object flash (cc4cc2f)	https://git.kernel.org/stable/c/cc4cc2fb5aaf9adb83c02211eb13b16cfcb7ba64
Linux Kernel
5	Linux Kernel Archives	https://www.kernel.org

Change Log

No	Changed Details	Date of change
1	[2024年12月12日] 掲載	Dec. 12, 2024, 3:58 p.m.