cve/2020/CVE-2020-36766.md

CVE-2020-36766

Description

An issue was discovered in the Linux kernel before 5.8.6. drivers/media/cec/core/cec-api.c leaks one byte of kernel memory on specific hardware to unprivileged users, because of directly assigning log_addrs with a hole in the struct.

POC

Reference

• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.6
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.6

Github

No PoCs found on GitHub currently.