Memory leaks in *create_resource_pool() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption). This affects the dce120_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce120/dce120_resource.c, the dce110_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce110/dce110_resource.c, the dce100_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce100/dce100_resource.c, the dcn10_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dcn10/dcn10_resource.c, and the dce112_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce112/dce112_resource.c, aka CID-104c307147ad.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Sep 28, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade python-perfUpgrade kernel-sourceUpgrade kernel-devel | Jan 3, 2020 | Nov 18, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 18, 2019 |
| Suse | — | Upgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade dlm-kmp-default | Dec 7, 2019 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-88-generic-lpaeUpgrade linux-image-5.3.0-40-lowlatencyUpgrade linux-image-oracle-edgeUpgrade linux-image-4.15.0-1069-azureUpgrade linux-image-oemUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.3.0-1018-raspi2Upgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-88-lowlatencyUpgrade linux-image-5.3.0-1013-azureUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.3.0-40-generic-lpaeUpgrade linux-image-5.3.0-1010-kvmUpgrade linux-image-genericUpgrade linux-image-4.15.0-1071-azureUpgrade linux-image-5.3.0-40-genericUpgrade linux-image-snapdragonUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-88-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gke-4.15Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1055-raspi2Upgrade linux-image-4.15.0-1072-snapdragonUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-aws-edgeUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1053-kvmUpgrade linux-image-azure-edgeUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-5.0.0-1010-oracleUpgrade linux-image-awsUpgrade linux-image-gkeUpgrade linux-image-5.0.0-1029-gcpUpgrade linux-image-4.15.0-1055-gcpUpgrade linux-image-gcpUpgrade linux-image-5.0.0-1029-gkeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1060-awsUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1052-gkeUpgrade linux-image-5.0.0-1024-awsUpgrade linux-image-gke-5.0Upgrade linux-image-5.3.0-1009-oracleUpgrade linux-image-gcp-edgeUpgrade linux-image-4.15.0-1033-oracleUpgrade linux-image-5.3.0-1012-gcpUpgrade linux-image-5.3.0-40-snapdragonUpgrade linux-image-generic-lpaeUpgrade linux-image-5.3.0-1011-aws | Jan 29, 2020 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub