An issue was discovered in the Linux kernel before 5.8.6. drivers/media/cec/core/cec-api.c leaks one byte of kernel memory on specific hardware to unprivileged users, because of directly assigning log_addrs with a hole in the struct.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-36766.json"
[
{
"digest": {
"function_hash": "326922200024137158807527444398528046057",
"length": 347.0
},
"signature_version": "v1",
"target": {
"file": "drivers/media/cec/core/cec-api.c",
"function": "cec_adap_g_log_addrs"
},
"signature_type": "Function",
"id": "CVE-2020-36766-8c9711bd",
"source": "https://github.com/torvalds/linux/commit/6c42227c3467549ddc65efe99c869021d2f4a570",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"107298071597322872683408329776865190123",
"297965275959755733708734360088929513691",
"93344628926246017007987755177816420148",
"160289330620321408260691353495200850455"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "drivers/media/cec/core/cec-api.c"
},
"signature_type": "Line",
"id": "CVE-2020-36766-d4268039",
"source": "https://github.com/torvalds/linux/commit/6c42227c3467549ddc65efe99c869021d2f4a570",
"deprecated": false
}
]