Memory leak in Linux kernel - CVE-2020-36784

Vulnerability identifier: #VU88216

CSH Severity: Low

CVSS v4 BT: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2020-36784

CWE-ID: CWE-401

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due a reference leak in drivers/i2c/busses/i2c-cadence.c. A local user can perform a denial of service attack.

Linux kernel
openEuler
Dell Data Protection Central
PowerProtect DP Series Appliance (IDPA)
Storage Resource Manager
EMC Cloud Tiering Appliance
bpftool
kernel
kernel-devel
perf-debuginfo
perf
python2-perf
kernel-source
python3-perf-debuginfo
python3-perf
kernel-tools-debuginfo
kernel-tools
kernel-tools-devel
python2-perf-debuginfo
kernel-debugsource
kernel-debuginfo
bpftool-debuginfo
Dell EMC Storage Monitoring and Reporting (SMR)
Dell Secure Connect Gateway

Install updates from vendor's website.

Linux kernel - addressed in versions 5.10.37, 5.11.21, 5.12.4, 5.13
bpftool - addressed in versions 4.19.90-2404.1.0.0245, 4.19.90-2404.1.0.0272
kernel - addressed in versions 4.19.90-2404.1.0.0245, 4.19.90-2404.1.0.0272
kernel-devel - addressed in versions 4.19.90-2404.1.0.0245, 4.19.90-2404.1.0.0272
perf-debuginfo - addressed in versions 4.19.90-2404.1.0.0245, 4.19.90-2404.1.0.0272
perf - addressed in versions 4.19.90-2404.1.0.0245, 4.19.90-2404.1.0.0272
python2-perf - addressed in versions 4.19.90-2404.1.0.0245, 4.19.90-2404.1.0.0272
kernel-source - addressed in versions 4.19.90-2404.1.0.0245, 4.19.90-2404.1.0.0272
python3-perf-debuginfo - addressed in versions 4.19.90-2404.1.0.0245, 4.19.90-2404.1.0.0272
python3-perf - addressed in versions 4.19.90-2404.1.0.0245, 4.19.90-2404.1.0.0272
kernel-tools-debuginfo - addressed in versions 4.19.90-2404.1.0.0245, 4.19.90-2404.1.0.0272
kernel-tools - addressed in versions 4.19.90-2404.1.0.0245, 4.19.90-2404.1.0.0272
kernel-tools-devel - addressed in versions 4.19.90-2404.1.0.0245, 4.19.90-2404.1.0.0272
python2-perf-debuginfo - addressed in versions 4.19.90-2404.1.0.0245, 4.19.90-2404.1.0.0272
kernel-debugsource - addressed in versions 4.19.90-2404.1.0.0245, 4.19.90-2404.1.0.0272
kernel-debuginfo - addressed in versions 4.19.90-2404.1.0.0245, 4.19.90-2404.1.0.0272
bpftool-debuginfo - addressed in versions 4.19.90-2404.1.0.0245, 4.19.90-2404.1.0.0272
Storage Resource Manager - update to 5.0.1.0
Dell EMC Storage Monitoring and Reporting (SMR) - update to 5.0.1.0
Dell Secure Connect Gateway - update to 5.24.00.14
EMC Cloud Tiering Appliance - update to 13.2.0.2.29

• https://git.kernel.org/stable/c/30410519328c94367e561fd878e5f0d3a0303585
• https://git.kernel.org/stable/c/d57ff04e0ed6f3be1682ae861ead33f879225e07
• https://git.kernel.org/stable/c/a45fc41beed8e0fe31864619c34aa00797fb60c1
• https://git.kernel.org/stable/c/23ceb8462dc6f4b4decdb5536a7e5fc477cdf0b6
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.37
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.21
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.4
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13

• Local denial of service in Linux kernel i2c driver
• openEuler 20.03 LTS SP1 update for kernel
• openEuler 20.03 LTS SP4 update for kernel
• Multiple vulnerabilities in Dell Secure Connect Gateway
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• Multiple vulnerabilities in Dell Storage Resource Manager (SRM) and Dell Storage Monitoring and Reporting (SMR)
• Multiple vulnerabilities in Dell Data Protection Central