SB2019110730 - Multiple vulnerabilities in Linux kernel

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2019110730

SB2019110730 - Multiple vulnerabilities in Linux kernel

Published: November 7, 2019 Updated: January 21, 2020

Security Bulletin ID SB2019110730
Severity
Low
Patch available
YES
Number of vulnerabilities 3
Exploitation vector Local access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 3 secuirty vulnerabilities.


1) Memory leak (CVE-ID: CVE-2019-18810)

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the "komeda_wb_connector_add()" function in drivers/gpu/drm/arm/display/komeda/komeda_wb_connector.c in the Linux kernel before 5.3.8 allows a local user to cause a denial of service (memory consumption) by triggering "drm_writeback_connector_init()" failures.


2) Memory leak (CVE-ID: CVE-2019-19075)

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the "ca8210_probe()" function in drivers/net/ieee802154/ca8210.c in the Linux kernel before 5.3.8 allows a local user to cause a denial of service (memory consumption) by triggering "ca8210_get_platform_data()" failures.


3) Memory leak (CVE-ID: CVE-2019-19083)

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the "clock_source_create()" functions under drivers/gpu/drm/amd/display/dc in the Linux kernel before 5.3.8 allow a local user to cause a denial of service (memory consumption).

This vulnerability affects the following functions:

  • dce112_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce112/dce112_resource.c
  • dce100_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce100/dce100_resource.c
  • dcn10_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dcn10/dcn10_resource.c
  • dcn20_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dcn20/dcn20_resource.c
  • dce120_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce120/dce120_resource.c
  • dce110_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce110/dce110_resource.c
  • dce80_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce80/dce80_resource.c

Remediation

Install update from vendor's website.

References