CVE-2020-36790: 
Linux Kernel vulnerability analysis and mitigation

CVE-2020-36790 is a vulnerability identified in the Linux kernel's nvmet component. The vulnerability was discovered and reported through kernel.org, with the initial disclosure made on May 1, 2025 (NVD, CVE).

The vulnerability is characterized as a memory management issue in the Linux kernel's nvmet component where memory allocated for new_model_number was not properly freed, resulting in a memory leak. This technical issue was identified and documented in the kernel codebase (Wiz).

The memory leak in the nvmet component could potentially lead to system resource exhaustion over time, as the allocated memory for new_model_number is not properly released back to the system (Wiz).

The vulnerability has been assigned a medium severity rating by Ubuntu Security Tracker, and according to available data, there are no known public exploits for this vulnerability (Wiz).

The vulnerability has been addressed in various Linux distributions. Debian has implemented fixes in multiple releases including bullseye (5.10.234-1), bookworm (6.1.135-1), trixie (6.12.22-1), and sid (6.12.25-1). Ubuntu has marked this vulnerability as 'Not affected' for most of its current releases (Ubuntu).