Memory leaks in *create_resource_pool() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption). This affects the dce120_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce120/dce120_resource.c, the dce110_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce110/dce110_resource.c, the dce100_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce100/dce100_resource.c, the dcn10_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dcn10/dcn10_resource.c, and the dce112_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce112/dce112_resource.c, aka CID-104c307147ad.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Sep 28, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernel-sourceUpgrade python-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Jan 3, 2020 | Nov 18, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 18, 2019 |
| Suse | — | Upgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade gfs2-kmp-default | Dec 7, 2019 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1033-oracleUpgrade linux-image-awsUpgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1060-awsUpgrade linux-image-4.15.0-1072-snapdragonUpgrade linux-image-raspi2Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1055-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-4.15.0-1053-kvmUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1052-gkeUpgrade linux-image-5.3.0-1009-oracleUpgrade linux-image-gke-5.0Upgrade linux-image-5.0.0-1024-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1055-gcpUpgrade linux-image-gcp-edgeUpgrade linux-image-5.0.0-1029-gcpUpgrade linux-image-5.3.0-1011-awsUpgrade linux-image-5.0.0-1029-gkeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.3.0-1012-gcpUpgrade linux-image-gke-4.15Upgrade linux-image-generic-lpaeUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-5.0.0-1010-oracleUpgrade linux-image-azure-edgeUpgrade linux-image-5.3.0-40-snapdragonUpgrade linux-image-aws-edgeUpgrade linux-image-oemUpgrade linux-image-lowlatencyUpgrade linux-image-5.3.0-40-generic-lpaeUpgrade linux-image-5.3.0-1013-azureUpgrade linux-image-4.15.0-1069-azureUpgrade linux-image-5.3.0-1018-raspi2Upgrade linux-image-azureUpgrade linux-image-oracle-edgeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1071-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-88-generic-lpaeUpgrade linux-image-4.15.0-88-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.3.0-1010-kvmUpgrade linux-image-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.3.0-40-lowlatencyUpgrade linux-image-4.15.0-88-lowlatencyUpgrade linux-image-5.3.0-40-genericUpgrade linux-image-aws-lts-18.04Upgrade linux-image-aws-hweUpgrade linux-image-snapdragon | Jan 29, 2020 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub