Vulnerability of the lm3554_probe() function in the drivers/staging/media/atomisp/i2c/atomisp-lm3554.c module – A driver for supporting Intel Atom-based devices in the Linux operating system, which allows an attacker to gain access to protected information.

🗓️ 18 Mar 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Vulnerability in lm3554_probe() in atomisp-lm3554 driver allows memory leak and potential information exposure.

Reporter	Title	Published	Views	Family All 18
ATTACKERKB	CVE-2020-36786	28 Feb 202409:15	–	attackerkb
Circl	CVE-2020-36786	29 Feb 202411:11	–	circl
CNNVD	Linux kernel security vulnerabilities	28 Feb 202400:00	–	cnnvd
CVE	CVE-2020-36786	28 Feb 202408:13	–	cve
Cvelist	CVE-2020-36786 media: [next] staging: media: atomisp: fix memory leak of object flash	28 Feb 202408:13	–	cvelist
Debian CVE	CVE-2020-36786	28 Feb 202408:13	–	debiancve
NVD	CVE-2020-36786	28 Feb 202409:15	–	nvd
OSV	DEBIAN-CVE-2020-36786	28 Feb 202409:15	–	osv
OSV	UBUNTU-CVE-2020-36786	28 Feb 202409:15	–	osv
Prion	Path traversal	28 Feb 202409:15	–	prion

Source	Link
git	www.git.kernel.org/stable/c/4f0f37d03cde8f4341df8454f9b40a67fda94a33
git	www.git.kernel.org/stable/c/cc4cc2fb5aaf9adb83c02211eb13b16cfcb7ba64
git	www.git.kernel.org/stable/c/6045b01dd0e3cd3759eafe7f290ed04c957500b1
git	www.git.kernel.org/stable/c/27d2eab69f7da8e94e4751ac5c6d22d809275484
lore	www.lore.kernel.org/linux-cve-announce/2024022821-CVE-2020-36786-fa2b@gregkh/T/
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
git	www.git.kernel.org/linus/6045b01dd0e3cd3759eafe7f290ed04c957500b1
cve	www.cve.org/CVERecord
lore	www.lore.kernel.org/linux-cve-announce/2024022821-CVE-2020-36786-fa2b@gregkh/
git	www.git.linuxtesting.ru/pub/scm/linux/kernel/git/lvc/linux-stable.git/commit/

18 Mar 2025 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 24.6

CVSS 35.5

EPSS0.00222

lm3554 probe memory leak information disclosure intel atom devices