Memory leaks in *create_resource_pool() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption). This affects the dce120_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce120/dce120_resource.c, the dce110_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce110/dce110_resource.c, the dce100_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce100/dce100_resource.c, the dcn10_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dcn10/dcn10_resource.c, and the dce112_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce112/dce112_resource.c, aka CID-104c307147ad.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Sep 28, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernel-sourceUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-tools | Jan 3, 2020 | Nov 18, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 18, 2019 |
| Suse | — | Upgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-default | Dec 7, 2019 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-genericUpgrade linux-image-4.15.0-88-lowlatencyUpgrade linux-image-oracle-edgeUpgrade linux-image-5.3.0-40-generic-lpaeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.3.0-1013-azureUpgrade linux-image-5.3.0-1018-raspi2Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-88-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-88-genericUpgrade linux-image-5.3.0-1010-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1071-azureUpgrade linux-image-4.15.0-1069-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.3.0-40-genericUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-aws-hweUpgrade linux-image-snapdragonUpgrade linux-image-oemUpgrade linux-image-5.3.0-40-lowlatencyUpgrade linux-image-4.15.0-1052-gkeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-gcpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.3.0-1009-oracleUpgrade linux-image-gkeUpgrade linux-image-gke-5.0Upgrade linux-image-4.15.0-1053-kvmUpgrade linux-image-5.0.0-1029-gkeUpgrade linux-image-5.3.0-1011-awsUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-5.0.0-1029-gcpUpgrade linux-image-5.3.0-1012-gcpUpgrade linux-image-azure-edgeUpgrade linux-image-5.0.0-1024-awsUpgrade linux-image-gke-4.15Upgrade linux-image-5.3.0-40-snapdragonUpgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-4.15.0-1060-awsUpgrade linux-image-aws-edgeUpgrade linux-image-5.0.0-1010-oracleUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1055-gcpUpgrade linux-image-4.15.0-1033-oracleUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1055-raspi2Upgrade linux-image-gcp-edgeUpgrade linux-image-4.15.0-1072-snapdragon | Jan 29, 2020 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub