• 公告ID (KylinSec-SA-2024-3460)

摘要:

Four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c in the Linux kernel before 5.3.8 allow attackers to cause a denial of service (memory consumption) by triggering mfd_add_hotplug_devices() or pm_genpd_add_device() failures, aka CID-57be09c6e874. NOTE: third parties dispute the relevance of this because the attacker must already have privileges for module loading

安全等级: Low

公告ID: KylinSec-SA-2024-3460

发布日期: 2024年8月28日

关联CVE: CVE-2019-19067  

  • 详细介绍

1. 漏洞描述

   

Four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c in the Linux kernel before 5.3.8 allow attackers to cause a denial of service (memory consumption) by triggering mfd_add_hotplug_devices() or pm_genpd_add_device() failures, aka CID-57be09c6e874. NOTE: third parties dispute the relevance of this because the attacker must already have privileges for module loading

2. 影响范围

cve名称 产品 组件 是否受影响
CVE-2019-19067 KY3.4-5 kernel Unaffected
CVE-2019-19067 KY3.5.3 kernel Unaffected
CVE-2019-19067 V6 kernel Unaffected

3. 影响组件

    无

4. 修复版本

    无

5. 修复方法

   无

6. 下载链接

    无
上一篇:KylinSec-SA-2024-3459 下一篇:KylinSec-SA-2024-3461