CVE-2020-36785: media: atomisp: Fix use after free in atomisp_alloc_css_stat_bufs()
In the Linux kernel, the following vulnerability has been resolved:
media: atomisp: Fix use after free in atomispalloccssstatbufs()
The "s3abuf" is freed along with all the other items on the "asd->s3astats" list. It leads to a double free and a use after free.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-36785?
CVE-2020-36785 has a high severity due to its potential to cause a use after free vulnerability which can be exploited for denial of service or arbitrary code execution.
How do I fix CVE-2020-36785?
To resolve CVE-2020-36785, upgrade your Linux kernel to a version later than 5.11.21, 5.12.4, or 5.10.37 depending on your current version.
What systems are affected by CVE-2020-36785?
CVE-2020-36785 affects specific versions of the Linux kernel, particularly between 5.8 and 5.10.37, 5.11 and 5.11.21, and 5.12 and 5.12.4.
What type of vulnerability is CVE-2020-36785?
CVE-2020-36785 is classified as a use after free vulnerability occurring in the Linux kernel's atomisp subsystem.
Can CVE-2020-36785 lead to remote exploitation?
Yes, CVE-2020-36785 can potentially be exploited remotely if the affected systems are compromised, leading to unauthorized access and control.