{"id":"CVE-2020-36785","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: atomisp: Fix use after free in atomisp_alloc_css_stat_bufs()\n\nThe \"s3a_buf\" is freed along with all the other items on the\n\"asd-\u003es3a_stats\" list.  It leads to a double free and a use after free.","modified":"2026-03-15T22:38:08.961701Z","published":"2024-02-28T09:15:36.930Z","references":[{"type":"FIX","url":"https://git.kernel.org/stable/c/801c1d505894008c888bc71d08d5cff5d87f8aba"},{"type":"FIX","url":"https://git.kernel.org/stable/c/8267ccd7b9df7ab682043507dd682fe0621cf045"},{"type":"FIX","url":"https://git.kernel.org/stable/c/ba11bbf303fafb33989e95473e409f6ab412b18d"},{"type":"FIX","url":"https://git.kernel.org/stable/c/d218c7a0284f6b92a7b82d2e19706e18663b4193"}],"affected":[{"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-36785.json","unresolved_ranges":[{"events":[{"introduced":"5.8"},{"fixed":"5.10.37"}]},{"events":[{"introduced":"5.11"},{"fixed":"5.11.21"}]},{"events":[{"introduced":"5.12"},{"fixed":"5.12.4"}]}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}