An issue was discovered in the Linux kernel before 5.8.6. drivers/media/cec/core/cec-api.c leaks one byte of kernel memory on specific hardware to unprivileged users, because of directly assigning log_addrs with a hole in the struct.
References
Configurations
History
21 Nov 2024, 05:30
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.6 - Release Notes | |
| References | () https://github.com/torvalds/linux/commit/6c42227c3467549ddc65efe99c869021d2f4a570 - Patch |
19 Sep 2023, 21:23
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 3.3 |
| First Time |
Linux
Linux linux Kernel |
|
| References | (MISC) https://github.com/torvalds/linux/commit/6c42227c3467549ddc65efe99c869021d2f4a570 - Patch | |
| References | (MISC) https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.6 - Release Notes | |
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
18 Sep 2023, 13:26
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-09-18 09:15
Updated : 2024-11-21 05:30
NVD link : CVE-2020-36766
Mitre link : CVE-2020-36766
CVE.ORG link : CVE-2020-36766
JSON object : View
Products Affected
linux
- linux_kernel
CWE