IT

Tracker / CVE-2020-36785

CVE-2020-36785

High 7.8

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: Fix use after free in atomisp_alloc_css_stat_bufs() The "s3a_buf" is freed along with all the other items on the "asd->s3a_stats" list. It leads to a double free and a use after free.

Affected products and versions

linux linux_kernel · 5.11 → 5.11.21
linux linux_kernel · 5.12 → 5.12.4
linux linux_kernel · 5.8 → 5.10.37

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References