Memory leaks in *create_resource_pool() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption). This affects the dce120_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce120/dce120_resource.c, the dce110_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce110/dce110_resource.c, the dce100_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce100/dce100_resource.c, the dcn10_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dcn10/dcn10_resource.c, and the dce112_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce112/dce112_resource.c, aka CID-104c307147ad.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Sep 28, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-sourceUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade bpftool | Jan 3, 2020 | Nov 18, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 18, 2019 |
| Suse | — | Upgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-build | Dec 7, 2019 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-4.15.0-1053-kvmUpgrade linux-image-4.15.0-1072-snapdragonUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1060-awsUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-4.15.0-1033-oracleUpgrade linux-image-awsUpgrade linux-image-4.15.0-1055-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-5.3.0-40-snapdragonUpgrade linux-image-5.0.0-1029-gkeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.3.0-1012-gcpUpgrade linux-image-azure-edgeUpgrade linux-image-gke-4.15Upgrade linux-image-aws-edgeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gcp-edgeUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-5.0.0-1029-gcpUpgrade linux-image-5.3.0-1011-awsUpgrade linux-image-4.15.0-1052-gkeUpgrade linux-image-gke-5.0Upgrade linux-image-kvmUpgrade linux-image-5.3.0-1009-oracleUpgrade linux-image-4.15.0-1055-raspi2Upgrade linux-image-5.0.0-1024-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-5.0.0-1010-oracleUpgrade linux-image-aws-hweUpgrade linux-image-genericUpgrade linux-image-5.3.0-40-generic-lpaeUpgrade linux-image-5.3.0-1013-azureUpgrade linux-image-5.3.0-1010-kvmUpgrade linux-image-4.15.0-1071-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.3.0-1018-raspi2Upgrade linux-image-aws-lts-18.04Upgrade linux-image-5.3.0-40-genericUpgrade linux-image-4.15.0-1069-azureUpgrade linux-image-4.15.0-88-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oracle-edgeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-azureUpgrade linux-image-4.15.0-88-lowlatencyUpgrade linux-image-5.3.0-40-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-88-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency | Jan 29, 2020 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub