CVE-2020-11609: Canonical Ubuntu Linux

Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days.

An issue was discovered in the stv06xx subsystem in the Linux kernel before 5.6.1. drivers/media/usb/gspca/stv06xx/stv06xx.c and drivers/media/usb/gspca/stv06xx/stv06xx_pb0100.c mishandle invalid descriptors, as demonstrated by a NULL pointer dereference, aka CID-485b06aadb93.

Affected products

• Canonical Ubuntu Linux: version 16.04 only; version 18.04 only
• Linux Linux Kernel: before 5.6.1 (fixed in 5.6.1)

Published 2020-04-07. Last modified 2026-10-08.