CVE-2019-19067: Medium severity Linux Linux kernel vulnerability
DISPUTED Four memory leaks in the acphwinit() function in drivers/gpu/drm/amd/amdgpu/amdgpuacp.c in the Linux kernel before 5.3.8 allow attackers to cause a denial of service (memory consumption) by triggering mfdaddhotplugdevices() or pmgenpdadddevice() failures, aka CID-57be09c6e874. NOTE: third parties dispute the relevance of this because the attacker must already have privileges for module loading.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.8-1Fixed in 7.1.8-2 - Upgrade
Upgrade
Linux kernel (drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c / acp_hw_init)to a version that resolves this vulnerability.Fixed in 5.3.8
Event History
Frequently Asked Questions
What is the severity of CVE-2019-19067?
CVE-2019-19067 is considered a denial of service vulnerability due to memory leaks in the Linux kernel.
How do I fix CVE-2019-19067?
To fix CVE-2019-19067, upgrade your Linux kernel to version 5.3.8 or later.
Which systems are affected by CVE-2019-19067?
CVE-2019-19067 affects multiple versions of the Linux kernel prior to 5.3.8 and various Linux distributions such as Ubuntu 18.04, 19.04, 19.10, and openSUSE Leap 15.1.
What are the potential impacts of CVE-2019-19067?
The potential impacts of CVE-2019-19067 include denial of service through excessive memory consumption.
Is CVE-2019-19067 being actively exploited?
As of the current information, there is no confirmed evidence that CVE-2019-19067 is actively exploited in the wild.