CVE-2020-36782

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails

The PM reference count is not expected to be incremented on return in lpi2c_imx_master_enable.

However, pm_runtime_get_sync will increment the PM reference count even failed. Forgetting to putting operation will result in a reference leak here.

Replace it with pm_runtime_resume_and_get to keep usage counter balanced.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 13d6eb20fc79a1e606307256dad4098375539a09, < 815859cb1d2302e74f11bf6894bceace9ca9eb4a; >= 13d6eb20fc79a1e606307256dad4098375539a09, < cc49d206414240483bb93ffa3d80243e6a776916; >= 13d6eb20fc79a1e606307256dad4098375539a09, < bb300acc867e937edc2a6898e92b21f88e4e4e66; >= 13d6eb20fc79a1e606307256dad4098375539a09, < b100650d80cd2292f6c152f5f2943b5944b3e8ce; >= 13d6eb20fc79a1e606307256dad4098375539a09, < 278e5bbdb9a94fa063c0f9bcde2479d0b8042462
LinuxLinux4.16

References

Timeline

Published
Feb 28, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2020

CVE-2020-367835.5In the Linux kernel, the following vulnerability has been resolved: i2c: img-scb: fix reference leak when pm_runtime_get_sync fails The PMCVE-2020-367845.5In the Linux kernel, the following vulnerability has been resolved: i2c: cadence: fix reference leak when pm_runtime_get_sync fails The PMCVE-2020-367857.8In the Linux kernel, the following vulnerability has been resolved: media: atomisp: Fix use after free in atomisp_alloc_css_stat_bufs() ThCVE-2020-367865.5In the Linux kernel, the following vulnerability has been resolved: media: [next] staging: media: atomisp: fix memory leak of object flash CVE-2020-367875.5In the Linux kernel, the following vulnerability has been resolved: media: aspeed: fix clock handling logic Video engine uses eclk and vclCVE-2020-367887.8In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: avoid a use-after-free when BO init fails nouveau_bo_initCVE-2020-367895.5In the Linux kernel, the following vulnerability has been resolved: can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ cCVE-2020-36795.5u'During execution after Address Space Layout Randomization is turned on for QTEE, part of code is still mapped at known address including cCVE-2020-367905.5In the Linux kernel, the following vulnerability has been resolved: nvmet: fix a memory leak We forgot to free new_model_numberCVE-2020-367917.1In the Linux kernel, the following vulnerability has been resolved: net_sched: keep alloc_hash updated after hash allocation In commit 599CVE-2020-36807.0A race condition can occur when using the fastrpc memory mapping API. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, SnapdCVE-2020-36819.8Authenticated and encrypted payload MMEs can be forged and remotely sent to any HPAV2 system using a jailbreak key recoverable from code.
CVE-2020-36782: Medium severity, CVSS 5.5 | Vulnix