CVE-2020-36777

published 2024-02-27

CVE-2020-36777: In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: Fix memory leak in dvb_media_device_free() dvb_media_device_free() is…

Priority P4 19 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

In the Linux kernel, the following vulnerability has been resolved:

media: dvbdev: Fix memory leak in dvb_media_device_free()

dvb_media_device_free() is leaking memory. Free `dvbdev->adapter->conn`
before setting it to NULL, as documented in include/media/media-device.h:
"The media_entity instance itself must be freed explicitly by the driver
if required."

Affected

21 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 5.10.38-1 (bookworm)	linux 5.10.38-1 (bookworm)
linux	linux	—	—
linux	linux	>= 0230d60e4661d9ced6fb0b9a30f182ebdafbba7a < 06854b943e0571ccbd7ad0a529babed1a98ff275	06854b943e0571ccbd7ad0a529babed1a98ff275
linux	linux	>= 0230d60e4661d9ced6fb0b9a30f182ebdafbba7a < 32168ca1f123316848fffb85d059860adf3c409f	32168ca1f123316848fffb85d059860adf3c409f
linux	linux	>= 0230d60e4661d9ced6fb0b9a30f182ebdafbba7a < cd89f79be5d553c78202f686e8e4caa5fbe94e98	cd89f79be5d553c78202f686e8e4caa5fbe94e98
linux	linux	>= 0230d60e4661d9ced6fb0b9a30f182ebdafbba7a < 9185b3b1c143b8da409c19ac5a785aa18d67a81b	9185b3b1c143b8da409c19ac5a785aa18d67a81b
linux	linux	>= 0230d60e4661d9ced6fb0b9a30f182ebdafbba7a < 43263fd43083e412311fa764cd04a727b0c6a749	43263fd43083e412311fa764cd04a727b0c6a749
linux	linux	>= 0230d60e4661d9ced6fb0b9a30f182ebdafbba7a < 9ad15e214fcd73694ea51967d86055f47b802066	9ad15e214fcd73694ea51967d86055f47b802066
linux	linux	>= 0230d60e4661d9ced6fb0b9a30f182ebdafbba7a < cede24d13be6c2a62be6d7ceea63c2719b0cfa82	cede24d13be6c2a62be6d7ceea63c2719b0cfa82
linux	linux	>= 0230d60e4661d9ced6fb0b9a30f182ebdafbba7a < bf9a40ae8d722f281a2721779595d6df1c33a0bf	bf9a40ae8d722f281a2721779595d6df1c33a0bf
linux	linux_kernel	>= 0 < 5.10.38-1	5.10.38-1
linux	linux_kernel	>= 0 < 5.10.38-1	5.10.38-1
linux	linux_kernel	>= 0 < 5.10.38-1	5.10.38-1
linux	linux_kernel	>= 0 < 5.10.38-1	5.10.38-1
linux	linux_kernel	>= 4.10.0 < 4.14.233	4.14.233
linux	linux_kernel	>= 4.15.0 < 4.19.191	4.19.191
linux	linux_kernel	>= 4.20.0 < 5.4.118	5.4.118
linux	linux_kernel	>= 4.5.0 < 4.9.269	4.9.269
linux	linux_kernel	>= 5.11.0 < 5.11.20	5.11.20
linux	linux_kernel	>= 5.12.0 < 5.12.3	5.12.3
linux	linux_kernel	>= 5.5.0 < 5.10.36	5.10.36

CVSS provenance

nvd v3.1 5.5 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

osv 5.5 MEDIUM

vendor_debian 5.5 MEDIUM

vendor_redhat 5.5 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-401