CVE-2020-36785

media: atomisp: Fix use after free in atomisp_alloc_css_stat_bufs()

State: Published
Severity: 7.8 High
Published: Feb 28, 2024
Updated: Aug 26, 2026
Reserved: Feb 26, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

media: atomisp: Fix use after free in atomisp_alloc_css_stat_bufs()

The "s3a_buf" is freed along with all the other items on the "asd->s3a_stats" list. It leads to a double free and a use after free.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	a49d25364dfb9f8a64037488a39ab1f56c5fa419 to before 51b8dc5163d2ff2bf04019f8bf7e3bd0e75bb654Affected ad85094b293e40e7a2f831b0311a389d952ebd5e to before d218c7a0284f6b92a7b82d2e19706e18663b4193Affected ad85094b293e40e7a2f831b0311a389d952ebd5e to before 801c1d505894008c888bc71d08d5cff5d87f8abaAffected ad85094b293e40e7a2f831b0311a389d952ebd5e to before 8267ccd7b9df7ab682043507dd682fe0621cf045Affected ad85094b293e40e7a2f831b0311a389d952ebd5e to before ba11bbf303fafb33989e95473e409f6ab412b18dAffected
LinuxLinux	4.12Affected 5.8Affected before 4.12Not affected 4.18 to before 5.8Not affected 5.10.37 through 5.10.Not affected 5.11.21 through 5.11.Not affected 5.12.4 through 5.12.*Not affected 5.13 and laterNot affected

Product

Versions

LinuxLinux

a49d25364dfb9f8a64037488a39ab1f56c5fa419 to before 51b8dc5163d2ff2bf04019f8bf7e3bd0e75bb654Affected
ad85094b293e40e7a2f831b0311a389d952ebd5e to before d218c7a0284f6b92a7b82d2e19706e18663b4193Affected
ad85094b293e40e7a2f831b0311a389d952ebd5e to before 801c1d505894008c888bc71d08d5cff5d87f8abaAffected
ad85094b293e40e7a2f831b0311a389d952ebd5e to before 8267ccd7b9df7ab682043507dd682fe0621cf045Affected
ad85094b293e40e7a2f831b0311a389d952ebd5e to before ba11bbf303fafb33989e95473e409f6ab412b18dAffected

LinuxLinux

4.12Affected
5.8Affected
before 4.12Not affected
4.18 to before 5.8Not affected
5.10.37 through 5.10.*Not affected
5.11.21 through 5.11.*Not affected
5.12.4 through 5.12.*Not affected
5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.