CVE-2020-36776
Published: Feb 27, 2024
Modified: May 23, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/cpufreq_cooling: Fix slab OOB issue Slab OOB issue is scanned by KASAN in cpu_power_to_freq(). If power is limited below the power of OPP0 in EM table, it will cause slab out-of-bound issue with negative array index. Return the lowest frequency if limited power cannot found a suitable OPP in EM table to fix this issue. Backtrace: [<ffffffd02d2a37f0>] die+0x104/0x5ac [<ffffffd02d2a5630>] bug_handler+0x64/0xd0 [<ffffffd02d288ce4>] brk_handler+0x160/0x258 [<ffffffd02d281e5c>] do_debug_exception+0x248/0x3f0 [<ffffffd02d284488>] el1_dbg+0x14/0xbc [<ffffffd02d75d1d4>] __kasan_report+0x1dc/0x1e0 [<ffffffd02d75c2e0>] kasan_report+0x10/0x20 [<ffffffd02d75def8>] __asan_report_load8_noabort+0x18/0x28 [<ffffffd02e6fce5c>] cpufreq_power2state+0x180/0x43c [<ffffffd02e6ead80>] power_actor_set_power+0x114/0x1d4 [<ffffffd02e6fac24>] allocate_power+0xaec/0xde0 [<ffffffd02e6f9f80>] power_allocator_throttle+0x3ec/0x5a4 [<ffffffd02e6ea888>] handle_thermal_trip+0x160/0x294 [<ffffffd02e6edd08>] thermal_zone_device_check+0xe4/0x154 [<ffffffd02d351cb4>] process_one_work+0x5e4/0xe28 [<ffffffd02d352f44>] worker_thread+0xa4c/0xfac [<ffffffd02d360124>] kthread+0x33c/0x358 [<ffffffd02d289940>] ret_from_fork+0xc/0x18
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 371a3bc79c11b707d7a1b7a2c938dc3cc042fffb - < c24a20912eef00587416628149c438e885eb1304affected 371a3bc79c11b707d7a1b7a2c938dc3cc042fffb - < 876a5f33e5d961d879c5436987c09b3d9ef70379affected 371a3bc79c11b707d7a1b7a2c938dc3cc042fffb - < 6bf443acf6ca4f666d0e4225614ba9993a3aa1a9affected 371a3bc79c11b707d7a1b7a2c938dc3cc042fffb - < 34ab17cc6c2c1ac93d7e5d53bb972df9a968f085affected 39e0651cac9c80865b2838f297f95ffc0f34a1d8+7 more versions |
Linux | Linux | affected 5.8unaffected 0 - < 5.8unaffected 5.10.36 - <= 5.10.*unaffected 5.11.20 - <= 5.11.*unaffected 5.12.3 - <= 5.12.*+1 more versions |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now