CVE-2020-36776
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/02/2024
Last modified:
10/04/2024
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
thermal/drivers/cpufreq_cooling: Fix slab OOB issue<br />
<br />
Slab OOB issue is scanned by KASAN in cpu_power_to_freq().<br />
If power is limited below the power of OPP0 in EM table,<br />
it will cause slab out-of-bound issue with negative array<br />
index.<br />
<br />
Return the lowest frequency if limited power cannot found<br />
a suitable OPP in EM table to fix this issue.<br />
<br />
Backtrace:<br />
[] die+0x104/0x5ac<br />
[] bug_handler+0x64/0xd0<br />
[] brk_handler+0x160/0x258<br />
[] do_debug_exception+0x248/0x3f0<br />
[] el1_dbg+0x14/0xbc<br />
[] __kasan_report+0x1dc/0x1e0<br />
[] kasan_report+0x10/0x20<br />
[] __asan_report_load8_noabort+0x18/0x28<br />
[] cpufreq_power2state+0x180/0x43c<br />
[] power_actor_set_power+0x114/0x1d4<br />
[] allocate_power+0xaec/0xde0<br />
[] power_allocator_throttle+0x3ec/0x5a4<br />
[] handle_thermal_trip+0x160/0x294<br />
[] thermal_zone_device_check+0xe4/0x154<br />
[] process_one_work+0x5e4/0xe28<br />
[] worker_thread+0xa4c/0xfac<br />
[] kthread+0x33c/0x358<br />
[] ret_from_fork+0xc/0x18
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.8.0 (including) | 5.10.36 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.11.0 (including) | 5.11.20 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.12.0 (including) | 5.12.3 (excluding) |
To consult the complete list of CPE names with products and versions, see this page



