CVE-2019-19067

Four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c in the Linux kernel before 5.3.8 allow attackers to cause a denial…

published November 18, 2019

CVSS
—
EPSS
0%
Percentile
40.0
In the wild
Unconfirmed
What it is

Four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c in the Linux kernel before 5.3.8 allow attackers to cause a denial of service (memory consumption) by triggering mfd_add_hotplug_devices() or pm_genpd_add_device() failures, aka CID-57be09c6e874. NOTE: third parties dispute the relevance of this because the attacker must already have privileges for module loading

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00473 · 40.0th percentile
Published
2019-11-18T05:24Z
EPSS history
Timeline
  • 18 NOV 05:24Z
    Four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c in the Linux kernel before 5.3.8 allow attackers to cause a denial…
    cvelistv5