In the Linux kernel before 5.6.1, drivers/media/usb/gspca/xirlink_cit.c (aka the Xirlink camera USB driver) mishandles invalid descriptors, aka CID-a246b4d54770.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-11668.json"
[
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@a246b4d547708f33ff4d4b9a7a5dbac741dc89d8",
"digest": {
"line_hashes": [
"275503558032694663911876958456004639919",
"11280701282163980891069606224888892533",
"181726277712820898763341356287744435052",
"216807333921493144379351344496642215153",
"134324007708390298331092373229986447781",
"50877200615979944900257360357381745113",
"123577603522794166041468525199669745919",
"295436457471274984354627895339963383193",
"205945871182046376643266078437696557226",
"11070094274790505784432412386111157106",
"120286248145800555168334891430745101915",
"82109935186497531472918432849532865669",
"133185478778833448410674505757155588620",
"214611842839579106367428559974943450046"
],
"threshold": 0.9
},
"id": "CVE-2020-11668-33efc2c7",
"deprecated": false,
"target": {
"file": "drivers/media/usb/gspca/xirlink_cit.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@a246b4d547708f33ff4d4b9a7a5dbac741dc89d8",
"digest": {
"function_hash": "96534185071656497315934813544395251193",
"length": 305.0
},
"id": "CVE-2020-11668-7d461d6a",
"deprecated": false,
"target": {
"file": "drivers/media/usb/gspca/xirlink_cit.c",
"function": "cit_get_packet_size"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@a246b4d547708f33ff4d4b9a7a5dbac741dc89d8",
"digest": {
"function_hash": "316287248726795479741839515173829859551",
"length": 355.0
},
"id": "CVE-2020-11668-e9bf7584",
"deprecated": false,
"target": {
"file": "drivers/media/usb/gspca/xirlink_cit.c",
"function": "sd_isoc_init"
}
}
]