CVE-2020-36766

Summary

CVE-2020-36766 is a vulnerability affecting Linux kernels prior to version 5.8.6. In the file drivers/media/cec/core/cec-api.c, unprivileged users can exploit a memory leak issue. The problem arises from directly assigning log_addrs with a hole in the struct, causing one byte of kernel memory to be exposed on specific hardware. This vulnerability could potentially be used by attackers for information disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.