FKIE_CVE-2020-36777

Vulnerability from fkie_nvd - Published: 2024-02-27 19:04 - Updated: 2026-06-17 03:16
Severity
5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Summary
In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: Fix memory leak in dvb_media_device_free() dvb_media_device_free() is leaking memory. Free `dvbdev->adapter->conn` before setting it to NULL, as documented in include/media/media-device.h: "The media_entity instance itself must be freed explicitly by the driver if required."
References
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/06854b943e0571ccbd7ad0a529babed1a98ff275Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/32168ca1f123316848fffb85d059860adf3c409fPatch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/43263fd43083e412311fa764cd04a727b0c6a749Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9185b3b1c143b8da409c19ac5a785aa18d67a81bPatch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9ad15e214fcd73694ea51967d86055f47b802066Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/bf9a40ae8d722f281a2721779595d6df1c33a0bfPatch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/cd89f79be5d553c78202f686e8e4caa5fbe94e98Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/cede24d13be6c2a62be6d7ceea63c2719b0cfa82Patch
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/06854b943e0571ccbd7ad0a529babed1a98ff275Patch
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/32168ca1f123316848fffb85d059860adf3c409fPatch
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/43263fd43083e412311fa764cd04a727b0c6a749Patch
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/9185b3b1c143b8da409c19ac5a785aa18d67a81bPatch
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/9ad15e214fcd73694ea51967d86055f47b802066Patch
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/bf9a40ae8d722f281a2721779595d6df1c33a0bfPatch
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/cd89f79be5d553c78202f686e8e4caa5fbe94e98Patch
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/cede24d13be6c2a62be6d7ceea63c2719b0cfa82Patch
Impacted products
Vendor Product Version
linux linux_kernel *
linux linux_kernel *
linux linux_kernel *
linux linux_kernel *
linux linux_kernel *
linux linux_kernel *
linux linux_kernel *
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/media/dvb-core/dvbdev.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "06854b943e0571ccbd7ad0a529babed1a98ff275",
              "status": "affected",
              "version": "0230d60e4661d9ced6fb0b9a30f182ebdafbba7a",
              "versionType": "git"
            },
            {
              "lessThan": "32168ca1f123316848fffb85d059860adf3c409f",
              "status": "affected",
              "version": "0230d60e4661d9ced6fb0b9a30f182ebdafbba7a",
              "versionType": "git"
            },
            {
              "lessThan": "cd89f79be5d553c78202f686e8e4caa5fbe94e98",
              "status": "affected",
              "version": "0230d60e4661d9ced6fb0b9a30f182ebdafbba7a",
              "versionType": "git"
            },
            {
              "lessThan": "9185b3b1c143b8da409c19ac5a785aa18d67a81b",
              "status": "affected",
              "version": "0230d60e4661d9ced6fb0b9a30f182ebdafbba7a",
              "versionType": "git"
            },
            {
              "lessThan": "43263fd43083e412311fa764cd04a727b0c6a749",
              "status": "affected",
              "version": "0230d60e4661d9ced6fb0b9a30f182ebdafbba7a",
              "versionType": "git"
            },
            {
              "lessThan": "9ad15e214fcd73694ea51967d86055f47b802066",
              "status": "affected",
              "version": "0230d60e4661d9ced6fb0b9a30f182ebdafbba7a",
              "versionType": "git"
            },
            {
              "lessThan": "cede24d13be6c2a62be6d7ceea63c2719b0cfa82",
              "status": "affected",
              "version": "0230d60e4661d9ced6fb0b9a30f182ebdafbba7a",
              "versionType": "git"
            },
            {
              "lessThan": "bf9a40ae8d722f281a2721779595d6df1c33a0bf",
              "status": "affected",
              "version": "0230d60e4661d9ced6fb0b9a30f182ebdafbba7a",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/media/dvb-core/dvbdev.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.5"
            },
            {
              "lessThan": "4.5",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.269",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.233",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.191",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.118",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.36",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.11.*",
              "status": "unaffected",
              "version": "5.11.20",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.12.*",
              "status": "unaffected",
              "version": "5.12.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.13",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8413F613-F1EE-430D-9972-52EEF6C49672",
              "versionEndExcluding": "4.9.269",
              "versionStartIncluding": "4.5.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "20505383-2EB8-41EF-A91B-F185B4FB81DF",
              "versionEndExcluding": "4.14.233",
              "versionStartIncluding": "4.10.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B7281E1E-A00B-49C0-A849-9CE1CE780227",
              "versionEndExcluding": "4.19.191",
              "versionStartIncluding": "4.15.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5670AEA3-082C-42D6-A067-CD9ECED4B84B",
              "versionEndExcluding": "5.4.118",
              "versionStartIncluding": "4.20.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C7148769-B830-4B8F-986F-E0C85A19FC7F",
              "versionEndExcluding": "5.10.36",
              "versionStartIncluding": "5.5.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EFB425F0-C28C-4B44-8B4C-AD512AA832DE",
              "versionEndExcluding": "5.11.20",
              "versionStartIncluding": "5.11.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C3814FA3-8141-4313-A852-8C4212BE12AD",
              "versionEndExcluding": "5.12.3",
              "versionStartIncluding": "5.12.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: dvbdev: Fix memory leak in dvb_media_device_free()\n\ndvb_media_device_free() is leaking memory. Free `dvbdev-\u003eadapter-\u003econn`\nbefore setting it to NULL, as documented in include/media/media-device.h:\n\"The media_entity instance itself must be freed explicitly by the driver\nif required.\""
    },
    {
      "lang": "es",
      "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: medios: dvbdev: corrige la p\u00e9rdida de memoria en dvb_media_device_free() dvb_media_device_free() est\u00e1 perdiendo memoria. Libere `dvbdev-\u0026gt;adapter-\u0026gt;conn` antes de configurarlo en NULL, como se documenta en include/media/media-device.h: \"La instancia media_entity debe ser liberada expl\u00edcitamente por el controlador si es necesario\"."
    }
  ],
  "id": "CVE-2020-36777",
  "lastModified": "2026-06-17T03:16:12.720",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2020-36777",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2024-03-11T16:40:26.925342Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2024-02-27T19:04:05.760",
  "references": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/06854b943e0571ccbd7ad0a529babed1a98ff275"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/32168ca1f123316848fffb85d059860adf3c409f"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/43263fd43083e412311fa764cd04a727b0c6a749"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/9185b3b1c143b8da409c19ac5a785aa18d67a81b"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/9ad15e214fcd73694ea51967d86055f47b802066"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/bf9a40ae8d722f281a2721779595d6df1c33a0bf"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/cd89f79be5d553c78202f686e8e4caa5fbe94e98"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/cede24d13be6c2a62be6d7ceea63c2719b0cfa82"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/06854b943e0571ccbd7ad0a529babed1a98ff275"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/32168ca1f123316848fffb85d059860adf3c409f"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/43263fd43083e412311fa764cd04a727b0c6a749"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/9185b3b1c143b8da409c19ac5a785aa18d67a81b"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/9ad15e214fcd73694ea51967d86055f47b802066"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/bf9a40ae8d722f281a2721779595d6df1c33a0bf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/cd89f79be5d553c78202f686e8e4caa5fbe94e98"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/cede24d13be6c2a62be6d7ceea63c2719b0cfa82"
    }
  ],
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-401"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.