CVE-2020-36783

Summary

In the Linux kernel, the following vulnerability has been resolved:

i2c: img-scb: fix reference leak when pm_runtime_get_sync fails

The PM reference count is not expected to be incremented on return in functions img_i2c_xfer and img_i2c_init.

However, pm_runtime_get_sync will increment the PM reference count even failed. Forgetting to putting operation will result in a reference leak here.

Replace it with pm_runtime_resume_and_get to keep usage counter balanced.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux93222bd9b966105f43418fd336654ad10045783a < 4734c4b1d9573c9d20bbc46cf37dde095ee011b8affected
LinuxLinux93222bd9b966105f43418fd336654ad10045783a < e80ae8bde41266d3b8bf012460b6593851766006affected
LinuxLinux93222bd9b966105f43418fd336654ad10045783a < 96c4a03658d661666c360959aa80cdabfe2972edaffected
LinuxLinux93222bd9b966105f43418fd336654ad10045783a < 7ee35cde1e810ad6ca589980b9ec2b7b62946a5baffected
LinuxLinux93222bd9b966105f43418fd336654ad10045783a < 223125e37af8a641ea4a09747a6a52172fc4b903affected
LinuxLinux4.15affected
LinuxLinux0 < 4.15unaffected
LinuxLinux5.4.119 <= 5.4.*unaffected
LinuxLinux5.10.37 <= 5.10.*unaffected
LinuxLinux5.11.21 <= 5.11.*unaffected
LinuxLinux5.12.4 <= 5.12.*unaffected
LinuxLinux5.13 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References