CVE-2020-36776

A flaw was found in the Linux kernel. The cpu_power_to_freq function in the drivers/thermal/cpufreq_cooling.c file can trigger an out-of-bounds read vulnerability when the power value cannot be found in the EM table. This issue can result in a denial of service.

The kernel as shipped by Red Hat Enterprise Linux 8 and 9 is not affected by this vulnerability. In RHEL8, the vulnerable code is not present, and in RHEL9, this issue was already fixed.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.