Memory leaks in *clock_source_create() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel before 5.3.8 allow attackers to cause a denial of service (memory consumption). This affects the dce112_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce112/dce112_resource.c, the dce100_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce100/dce100_resource.c, the dcn10_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dcn10/dcn10_resource.c, the dcn20_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dcn20/dcn20_resource.c, the dce120_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce120/dce120_resource.c, the dce110_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce110/dce110_resource.c, and the dce80_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce80/dce80_resource.c, aka CID-055e547478a1.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-sourceUpgrade python3-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libs | Jan 3, 2020 | Nov 18, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 18, 2019 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-default | Dec 7, 2019 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-4.15.0-1052-gcpUpgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1031-oracleUpgrade linux-image-5.3.0-1009-gcpUpgrade linux-image-oracle-edgeUpgrade linux-image-azure-edgeUpgrade linux-image-4.15.0-1070-snapdragonUpgrade linux-image-oracleUpgrade linux-image-5.3.0-1008-awsUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1050-gkeUpgrade linux-image-raspi2Upgrade linux-image-gke-5.0Upgrade linux-image-5.3.0-24-genericUpgrade linux-image-aws-hweUpgrade linux-image-5.3.0-24-generic-lpaeUpgrade linux-image-gke-4.15Upgrade linux-image-5.3.0-24-snapdragonUpgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-aws-edgeUpgrade linux-image-oemUpgrade linux-image-5.3.0-1008-kvmUpgrade linux-image-5.0.0-1023-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-74-lowlatencyUpgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-4.15.0-1053-raspi2Upgrade linux-image-aws-lts-18.04Upgrade linux-image-5.0.0-1028-azureUpgrade linux-image-virtualUpgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-4.15.0-74-generic-lpaeUpgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-5.3.0-1007-oracleUpgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1066-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1052-kvmUpgrade linux-image-4.15.0-74-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1066-oemUpgrade linux-image-4.15.0-1057-awsUpgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-genericUpgrade linux-image-gcp-edgeUpgrade linux-image-snapdragonUpgrade linux-image-5.0.0-38-genericUpgrade linux-image-gkeUpgrade linux-image-oem-osp1Upgrade linux-image-5.3.0-24-lowlatency | Dec 3, 2019 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub