CVE-2020-36777
Description
In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: Fix memory leak in dvb_media_device_free() dvb_media_device_free() is leaking memory. Free `dvbdev->adapter->conn` before setting it to NULL, as documented in include/media/media-device.h: "The media_entity instance itself must be freed explicitly by the driver if required."
Predictions
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: alma — https://errata.almalinux.org/8/ALSA-2024-3627.html
Vendor advisory: alma — https://access.redhat.com/errata/RHSA-2024:3627
Vendor advisory: alma — https://errata.almalinux.org/8/ALSA-2024-3618.html
Vendor advisory: alma — https://bugzilla.redhat.com/2278537
Vendor advisory: alma — https://bugzilla.redhat.com/2278431
Vendor advisory: alma — https://bugzilla.redhat.com/2278417
Vendor advisory: alma — https://bugzilla.redhat.com/2278409
Vendor advisory: alma — https://bugzilla.redhat.com/2278398
Vendor advisory: alma — https://bugzilla.redhat.com/2278356
Vendor advisory: alma — https://bugzilla.redhat.com/2278314
Vendor advisory: alma — https://bugzilla.redhat.com/2278268
Vendor advisory: alma — https://bugzilla.redhat.com/2278240
Vendor advisory: alma — https://bugzilla.redhat.com/2278237
Vendor advisory: alma — https://bugzilla.redhat.com/2278169
Vendor advisory: alma — https://bugzilla.redhat.com/2275777
Vendor advisory: alma — https://bugzilla.redhat.com/2275707
Vendor advisory: alma — https://bugzilla.redhat.com/2275666
Vendor advisory: alma — https://bugzilla.redhat.com/2275655
Vendor advisory: alma — https://bugzilla.redhat.com/2275645
Vendor advisory: alma — https://bugzilla.redhat.com/2274624
Vendor advisory: alma — https://bugzilla.redhat.com/2273262
Vendor advisory: alma — https://bugzilla.redhat.com/2273260
Vendor advisory: alma — https://bugzilla.redhat.com/2273223
Vendor advisory: alma — https://bugzilla.redhat.com/2273094
Vendor advisory: alma — https://bugzilla.redhat.com/2273092
Vendor advisory: alma — https://bugzilla.redhat.com/2272791
Vendor advisory: alma — https://bugzilla.redhat.com/2272780
Vendor advisory: alma — https://bugzilla.redhat.com/2271476
Vendor advisory: alma — https://bugzilla.redhat.com/2271469
Vendor advisory: alma — https://bugzilla.redhat.com/2270881
Vendor advisory: alma — https://bugzilla.redhat.com/2270879
Vendor advisory: alma — https://bugzilla.redhat.com/2270080
Vendor advisory: alma — https://bugzilla.redhat.com/2269856
Vendor advisory: alma — https://bugzilla.redhat.com/2269213
Vendor advisory: alma — https://bugzilla.redhat.com/2268317
Vendor advisory: alma — https://bugzilla.redhat.com/2268315
Vendor advisory: alma — https://bugzilla.redhat.com/2268309
Vendor advisory: alma — https://bugzilla.redhat.com/2268293
Vendor advisory: alma — https://bugzilla.redhat.com/2268291
Vendor advisory: alma — https://bugzilla.redhat.com/2267804
Vendor advisory: alma — https://bugzilla.redhat.com/2267797
Vendor advisory: alma — https://bugzilla.redhat.com/2267789
Vendor advisory: alma — https://bugzilla.redhat.com/2267758
Vendor advisory: alma — https://bugzilla.redhat.com/2267724
Vendor advisory: alma — https://bugzilla.redhat.com/2267705
Vendor advisory: alma — https://bugzilla.redhat.com/2267509
Vendor advisory: alma — https://bugzilla.redhat.com/2267355
Vendor advisory: alma — https://bugzilla.redhat.com/2267185
Vendor advisory: alma — https://bugzilla.redhat.com/2267038
Vendor advisory: alma — https://bugzilla.redhat.com/2266841
Vendor advisory: alma — https://bugzilla.redhat.com/2266746
Vendor advisory: alma — https://bugzilla.redhat.com/2266446
Vendor advisory: alma — https://bugzilla.redhat.com/2266296
Vendor advisory: alma — https://bugzilla.redhat.com/2265833
Vendor advisory: alma — https://bugzilla.redhat.com/2265654
Vendor advisory: alma — https://bugzilla.redhat.com/2265646
Vendor advisory: alma — https://bugzilla.redhat.com/2265271
Vendor advisory: alma — https://bugzilla.redhat.com/2263875
Vendor advisory: alma — https://bugzilla.redhat.com/2257406
Vendor advisory: alma — https://bugzilla.redhat.com/2250843
Vendor advisory: alma — https://access.redhat.com/errata/RHSA-2024:3618
Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2020-36777
Vendor advisory: suse — https://www.suse.com/security/cve/CVE-2020-36777.html
Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2024:3618
Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2024:3627
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| rocky | 8 | fixed | |
| sles | affected | | |
| debian | bookworm | fixed | 5.10.38-1 |
| debian | bullseye | fixed | 5.10.38-1 |
| debian | forky | fixed | 5.10.38-1 |
| debian | sid | fixed | 5.10.38-1 |
| debian | trixie | fixed | 5.10.38-1 |
References
- https://errata.rockylinux.org/RLSA-2024:3627
- https://errata.rockylinux.org/RLSA-2024:3618
- https://www.suse.com/security/cve/CVE-2020-36777.html
- https://security-tracker.debian.org/tracker/CVE-2020-36777
- https://access.redhat.com/errata/RHSA-2024:3618
- https://bugzilla.redhat.com/2250843
- https://bugzilla.redhat.com/2257406
- https://bugzilla.redhat.com/2263875
- https://bugzilla.redhat.com/2265271
- https://bugzilla.redhat.com/2265646
- https://bugzilla.redhat.com/2265654
- https://bugzilla.redhat.com/2265833
- https://bugzilla.redhat.com/2266296
- https://bugzilla.redhat.com/2266446
- https://bugzilla.redhat.com/2266746
- https://bugzilla.redhat.com/2266841
- https://bugzilla.redhat.com/2267038
- https://bugzilla.redhat.com/2267185
- https://bugzilla.redhat.com/2267355
- https://bugzilla.redhat.com/2267509
- https://bugzilla.redhat.com/2267705
- https://bugzilla.redhat.com/2267724
- https://bugzilla.redhat.com/2267758
- https://bugzilla.redhat.com/2267789
- https://bugzilla.redhat.com/2267797
Verify integrity in audit chain (admin only). AS-IS.