Two memory leaks in the v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c in the Linux kernel before 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering kcalloc() or v3d_job_init() failures, aka CID-29cd13cfd762.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 18, 2019 |
| Suse | — | Upgrade kernel-default | Feb 4, 2022 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-5.3.0-1011-gcpUpgrade linux-image-genericUpgrade linux-image-5.3.0-26-generic-lpaeUpgrade linux-image-5.3.0-26-genericUpgrade linux-image-5.3.0-1009-kvmUpgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-snapdragonUpgrade linux-image-5.3.0-1010-gcpUpgrade linux-image-gkeUpgrade linux-image-azureUpgrade linux-image-azure-edgeUpgrade linux-image-5.3.0-1009-azureUpgrade linux-image-raspi2Upgrade linux-image-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-edgeUpgrade linux-image-5.3.0-1008-oracleUpgrade linux-image-5.3.0-1015-raspi2Upgrade linux-image-5.3.0-1009-awsUpgrade linux-image-5.3.0-26-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-5.3.0-26-snapdragon | Jan 8, 2020 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub