CVE-2020-36785

HighCVSS 7.8/10Last modified Aug 26, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

media: atomisp: Fix use after free in atomisp_alloc_css_stat_bufs()

The "s3a_buf" is freed along with all the other items on the "asd->s3a_stats" list. It leads to a double free and a use after free.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-415CWE-416

Affected software

VendorProductVersions
LinuxLinux>= a49d25364dfb9f8a64037488a39ab1f56c5fa419, < 51b8dc5163d2ff2bf04019f8bf7e3bd0e75bb654; >= ad85094b293e40e7a2f831b0311a389d952ebd5e, < d218c7a0284f6b92a7b82d2e19706e18663b4193; >= ad85094b293e40e7a2f831b0311a389d952ebd5e, < 801c1d505894008c888bc71d08d5cff5d87f8aba; >= ad85094b293e40e7a2f831b0311a389d952ebd5e, < 8267ccd7b9df7ab682043507dd682fe0621cf045; >= ad85094b293e40e7a2f831b0311a389d952ebd5e, < ba11bbf303fafb33989e95473e409f6ab412b18d
LinuxLinux4.12; 5.8

References

Timeline

Published
Feb 28, 2024
Last modified
Aug 26, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-367865.5In the Linux kernel, the following vulnerability has been resolved: media: [next] staging: media: atomisp: fix memory leak of object flash CVE-2020-367875.5In the Linux kernel, the following vulnerability has been resolved: media: aspeed: fix clock handling logic Video engine uses eclk and vclCVE-2020-367887.8In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: avoid a use-after-free when BO init fails nouveau_bo_initCVE-2020-367895.5In the Linux kernel, the following vulnerability has been resolved: can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ cCVE-2020-36795.5u'During execution after Address Space Layout Randomization is turned on for QTEE, part of code is still mapped at known address including cCVE-2020-367905.5In the Linux kernel, the following vulnerability has been resolved: nvmet: fix a memory leak We forgot to free new_model_numberCVE-2020-367917.1In the Linux kernel, the following vulnerability has been resolved: net_sched: keep alloc_hash updated after hash allocation In commit 599CVE-2020-36807.0A race condition can occur when using the fastrpc memory mapping API. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, SnapdCVE-2020-36819.8Authenticated and encrypted payload MMEs can be forged and remotely sent to any HPAV2 system using a jailbreak key recoverable from code.CVE-2020-368256.3** UNSUPPORTED WHEN ASSIGNED ** ** DISPUTED ** A vulnerability has been found in cyberaz0r WebRAT up to 20191222 and classified as critical.CVE-2020-368263.5A vulnerability was found in AwesomestCode LiveBot. It has been classified as problematic. Affected is the function parseSend of the file jsCVE-2020-368275.4The XAO::Web module before 1.84 for Perl mishandles < and > characters in JSON output during use of json-embed in Web::Action.