ID CVE-2019-18810
Summary A memory leak in the komeda_wb_connector_add() function in drivers/gpu/drm/arm/display/komeda/komeda_wb_connector.c in the Linux kernel before 5.3.8 allows attackers to cause a denial of service (memory consumption) by triggering drm_writeback_connector_init() failures, aka CID-a0ecd6fdbf5d.
References
Vulnerable Configurations
  • cpe:2.3:o:linux:linux_kernel:5.3:*:*:*:*:*:*:*
    cpe:2.3:o:linux:linux_kernel:5.3:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:5.3:rc1:*:*:*:*:*:*
    cpe:2.3:o:linux:linux_kernel:5.3:rc1:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:5.3.1:*:*:*:*:*:*:*
    cpe:2.3:o:linux:linux_kernel:5.3.1:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:5.3.2:*:*:*:*:*:*:*
    cpe:2.3:o:linux:linux_kernel:5.3.2:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:5.3.3:*:*:*:*:*:*:*
    cpe:2.3:o:linux:linux_kernel:5.3.3:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:5.3.4:*:*:*:*:*:*:*
    cpe:2.3:o:linux:linux_kernel:5.3.4:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:5.3.5:*:*:*:*:*:*:*
    cpe:2.3:o:linux:linux_kernel:5.3.5:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:5.3.6:*:*:*:*:*:*:*
    cpe:2.3:o:linux:linux_kernel:5.3.6:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:5.3.7:*:*:*:*:*:*:*
    cpe:2.3:o:linux:linux_kernel:5.3.7:*:*:*:*:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*
CVSS
Base: 7.8 (as of 03-02-2023 - 16:11)
Impact:
Exploitability:
CWE CWE-401
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:C
refmap via4
confirm https://security.netapp.com/advisory/ntap-20191205-0001/
misc
ubuntu USN-4208-1
Last major update 03-02-2023 - 16:11
Published 07-11-2019 - 16:15
Last modified 03-02-2023 - 16:11
Back to Top