UBUNTU-CVE-2019-19044
Two memory leaks in the v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c in the Linux kernel before 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering kcalloc() or v3d_job_init() failures, aka CID-29cd13cfd762.
02 / AFFECTED SOFTWARE
Affected packages
23 explicit affected versions
2 explicit affected versions
4 explicit affected versions
2 explicit affected versions
12 explicit affected versions
10 explicit affected versions
26 explicit affected versions
51 explicit affected versions
78 explicit affected versions
45 explicit affected versions
6 explicit affected versions
12 explicit affected versions
1 explicit affected versions
1 explicit affected versions
23 explicit affected versions
1 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Two memory leaks in the v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c in the Linux kernel before 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering kcalloc() or v3d_job_init() failures, aka CID-29cd13cfd762.
05 / REFERENCES
Further evidence
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.11
- https://git.kernel.org/linus/29cd13cfd7624726d9e6becbae9aa419ef35af7f
- https://github.com/torvalds/linux/commit/29cd13cfd7624726d9e6becbae9aa419ef35af7f
- https://ubuntu.com/security/CVE-2019-19044
- https://ubuntu.com/security/notices/USN-4225-1
- https://www.cve.org/CVERecord?id=CVE-2019-19044