Memory leak in Linux kernel - CVE-2019-19082

Vulnerability identifier: #VU23028

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-19082

CWE-ID: CWE-401

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the *create_resource_pool() functions in "drivers/gpu/drm/amd/display/dc" file. A local attacker can cause a denial of service condition (memory consumption).

This vulnerability affects the following functions:

• dce120_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce120/dce120_resource.c

• dce110_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce110/dce110_resource.c
  

• dce100_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce100/dce100_resource.c
  

• dcn10_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dcn10/dcn10_resource.c
  

• dce112_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce112/dce112_resource.c

Linux kernel
Ubuntu
linux-kvm (Ubuntu package)
linux-snapdragon (Ubuntu package)
linux-hwe (Ubuntu package)
linux-gcp (Ubuntu package)
linux-azure (Ubuntu package)
linux (Ubuntu package)
linux-raspi2 (Ubuntu package)
linux-oracle (Ubuntu package)
linux-aws (Ubuntu package)
linux-gke-4.15 (Ubuntu package)
linux-aws-hwe (Ubuntu package)
linux-oracle-5.0 (Ubuntu package)
linux-gke-5.0 (Ubuntu package)
linux-aws-5.0 (Ubuntu package)
linux-azure-5.3 (Ubuntu package)
linux-gcp-5.3 (Ubuntu package)
linux-raspi2-5.3 (Ubuntu package)

Install updates from vendor's website.

Linux kernel - update to 5.3.12
linux-kvm (Ubuntu package) - addressed in versions 4.15.0-1053.53, 5.3.0-1010.11
linux-snapdragon (Ubuntu package) - update to 4.15.0-1072.79
linux-hwe (Ubuntu package) - addressed in versions 4.15.0-88.88~16.04.1, 5.3.0-40.32~18.04.1
linux-gcp (Ubuntu package) - addressed in versions 4.15.0-1055.59, 5.0.0-1029.30~18.04.1, 5.3.0-1012.13
linux-azure (Ubuntu package) - addressed in versions 4.15.0-1071.76, 5.3.0-1013.14
linux (Ubuntu package) - addressed in versions 4.15.0-88.88, 5.3.0-40.32
linux-raspi2 (Ubuntu package) - addressed in versions 4.15.0-1055.59, 5.3.0-1018.20
linux-oracle (Ubuntu package) - addressed in versions 4.15.0-1033.36~16.04.1, 4.15.0-1033.36, 5.3.0-1009.10
linux-aws (Ubuntu package) - addressed in versions 4.15.0-1060.62, 5.3.0-1011.12
linux-gke-4.15 (Ubuntu package) - update to 4.15.0-1052.55
linux-aws-hwe (Ubuntu package) - update to 4.15.0-1060.62~16.04.1
linux-oracle-5.0 (Ubuntu package) - update to 5.0.0-1010.15~18.04.1
linux-gke-5.0 (Ubuntu package) - update to 5.0.0-1029.30~18.04.1
linux-aws-5.0 (Ubuntu package) - update to 5.0.0-1024.27~18.04.1
linux-azure-5.3 (Ubuntu package) - update to 5.3.0-1013.14~18.04.1
linux-gcp-5.3 (Ubuntu package) - update to 5.3.0-1012.13~18.04.1
linux-raspi2-5.3 (Ubuntu package) - update to 5.3.0-1018.20~18.04.1

• https://github.com/torvalds/linux/commit/104c307147ad379617472dd91a5bcb368d72bd6d

• Multiple vulnerabilities in Linux kernel
• Ubuntu update for linux-aws-5.0, linux-gcp, linux-gke-5.0 and more
• Ubuntu update for linux, linux-aws, linux-azure and more
• Ubuntu update for linux, linux-aws, linux-aws-hwe and more