CVE-2020-11608: Null Pointer Dereference
An issue was discovered in the Linux kernel before 5.6.1. drivers/media/usb/gspca/ov519.c allows NULL pointer dereferences in ov511modeinitregs and ov518modeinitregs when there are zero endpoints, aka CID-998912346c0d.
Other sources
An issue was discovered in the Linux kernel before 5.6.1. drivers/media/usb/gspca/ov519.c allows NULL pointer dereferences in ov511modeinitregs and ov518modeinitregs when there are zero endpoints.
Reference and upstream commit: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.1 https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=998912346c0da53a6dbb71fab3a138586b596b30
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Event History
Frequently Asked Questions
What is the severity of CVE-2020-11608?
CVE-2020-11608 has a medium severity due to its potential to cause NULL pointer dereferences affecting system stability.
How do I fix CVE-2020-11608?
To fix CVE-2020-11608, upgrade the Linux kernel to version 5.6.1 or later.
Which versions of Linux are affected by CVE-2020-11608?
CVE-2020-11608 affects Linux kernel versions prior to 5.6.1 and specific versions of Ubuntu 16.04 and 18.04.
What components are involved in CVE-2020-11608?
CVE-2020-11608 specifically involves the ov511_mode_init_regs and ov518_mode_init_regs functions in the gspca driver.
Is CVE-2020-11608 a remote exploit?
CVE-2020-11608 is not considered a remote exploit as it affects local drivers and requires direct access.