CVE-2020-36777: media: dvbdev: Fix memory leak in dvb_media_device_free()
Vulnerability summary
CVE-2020-36777 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 15.4% of scored vulnerabilities.
Not severe (CVSS 5.5, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 8 · Related 6Timeline
- 27-02-2024PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: Fix memory leak in dvb_media_device_free() dvb_media_device_free() is leaking memory. Free `dvbdev->adapter->conn` before setting it to NULL, as documented in include/media/media-device.h: "The media_entity instance itself must be freed explicitly by the driver if required."
CVSS metrics
3 scores · 3 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.24%
Chance of exploitation in the next 30 days
Percentile
15%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.24% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu85 products
- linux< 4.15.0-151.157 | < 5.4.0-77.86
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 4.15.0-1109.116 | < 5.4.0-1051.53
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 0230d60e4661d9ced6fb0b9a30f182ebdafbba7a, < 06854b943e0571ccbd7ad0a529babed1a98ff275 | ≥ 0230d60e4661d9ced6fb0b9a30f182ebdafbba7a, < 32168ca1f123316848fffb85d059860adf3c409f | ≥ 0230d60e4661d9ced6fb0b9a30f182ebdafbba7a, < cd89f79be5d553c78202f686e8e4caa5fbe94e98 | ≥ 0230d60e4661d9ced6fb0b9a30f182ebdafbba7a, < 9185b3b1c143b8da409c19ac5a785aa18d67a81b | ≥ 0230d60e4661d9ced6fb0b9a30f182ebdafbba7a, < 43263fd43083e412311fa764cd04a727b0c6a749 | ≥ 0230d60e4661d9ced6fb0b9a30f182ebdafbba7a, < 9ad15e214fcd73694ea51967d86055f47b802066 | ≥ 0230d60e4661d9ced6fb0b9a30f182ebdafbba7a, < cede24d13be6c2a62be6d7ceea63c2719b0cfa82 | ≥ 0230d60e4661d9ced6fb0b9a30f182ebdafbba7a, < bf9a40ae8d722f281a2721779595d6df1c33a0bf | 4.5
- linux_kernel≥ 4.5.0, < 4.9.269 | ≥ 4.10.0, < 4.14.233 | ≥ 4.15.0, < 4.19.191 | ≥ 4.20.0, < 5.4.118 | ≥ 5.5.0, < 5.10.36 | ≥ 5.11.0, < 5.11.20 | ≥ 5.12.0, < 5.12.3
Debian1 product
- linux< 5.10.38-1
3 vendors · 88 products
