Lucene search

K
ubuntucveUbuntu.comUB:CVE-2020-36788
HistoryMay 21, 2024 - 12:00 a.m.

CVE-2020-36788

2024-05-2100:00:00
ubuntu.com
ubuntu.com
5
linux kernel
vulnerability
cve-2020-36788
resolved
use-after-free
memory freed
nouveau
ttm_bo_init
gem object

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau: avoid a use-after-free when BO init fails nouveau_bo_init() is
backed by ttm_bo_init() and ferries its return code back to the caller. On
failures, ttm_bo_init() invokes the provided destructor which should
de-initialize and free the memory. Thus, when nouveau_bo_init() returns an
error the gem object has already been released and the memory freed by
nouveau_bo_del_ttm().

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%