CVE-2020-11609

Katalog CVE

CVSS 4.3 · Medium EPSS 0,59%

Kerentanan NULL Pointer Dereference pada linux kernel, canonical ubuntu linux. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

An issue was discovered in the stv06xx subsystem in the Linux kernel before 5.6.1. drivers/media/usb/gspca/stv06xx/stv06xx.c and drivers/media/usb/gspca/stv06xx/stv06xx_pb0100.c mishandle invalid descriptors, as demonstrated by a NULL pointer dereference, aka CID-485b06aadb93.

Rincian

Terbit di NVD

7 April 2020

Terakhir diubah

8 Oktober 2026

Status NVD

Modified

CVSS 3.1

4.3 (Medium), sumber NVD
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-476: NULL Pointer Dereference

EPSS (30 hari)

0,59% peluang dieksploitasi; lebih tinggi dari 46,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.1 release notes · advisory vendor
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=485b06aadb933190f4bc44e006076bc27a2... patch · advisory vendor
• https://github.com/torvalds/linux/commit/485b06aadb933190f4bc44e006076bc27a23f205 patch · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20200430-0004/ advisory pihak ketiga
• https://usn.ubuntu.com/4345-1/ advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html
• https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html
• https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html
• https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html
• https://usn.ubuntu.com/4364-1/
• https://usn.ubuntu.com/4368-1/
• https://usn.ubuntu.com/4369-1/
• https://www.debian.org/security/2020/dsa-4698