In the Linux kernel before 5.6.1, drivers/media/usb/gspca/xirlink_cit.c (aka the Xirlink camera USB driver) mishandles invalid descriptors, aka CID-a246b4d54770.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-11668.json"
[ { "events": [ { "introduced": "0" }, { "fixed": "5.6.1" } ] } ]