CVE-2020-36776

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/02/2024
Last modified:
10/04/2024

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> thermal/drivers/cpufreq_cooling: Fix slab OOB issue<br /> <br /> Slab OOB issue is scanned by KASAN in cpu_power_to_freq().<br /> If power is limited below the power of OPP0 in EM table,<br /> it will cause slab out-of-bound issue with negative array<br /> index.<br /> <br /> Return the lowest frequency if limited power cannot found<br /> a suitable OPP in EM table to fix this issue.<br /> <br /> Backtrace:<br /> [] die+0x104/0x5ac<br /> [] bug_handler+0x64/0xd0<br /> [] brk_handler+0x160/0x258<br /> [] do_debug_exception+0x248/0x3f0<br /> [] el1_dbg+0x14/0xbc<br /> [] __kasan_report+0x1dc/0x1e0<br /> [] kasan_report+0x10/0x20<br /> [] __asan_report_load8_noabort+0x18/0x28<br /> [] cpufreq_power2state+0x180/0x43c<br /> [] power_actor_set_power+0x114/0x1d4<br /> [] allocate_power+0xaec/0xde0<br /> [] power_allocator_throttle+0x3ec/0x5a4<br /> [] handle_thermal_trip+0x160/0x294<br /> [] thermal_zone_device_check+0xe4/0x154<br /> [] process_one_work+0x5e4/0xe28<br /> [] worker_thread+0xa4c/0xfac<br /> [] kthread+0x33c/0x358<br /> [] ret_from_fork+0xc/0x18

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.8.0 (including) 5.10.36 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.11.0 (including) 5.11.20 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.12.0 (including) 5.12.3 (excluding)