CWE Code: 400
Vulnerability Type: privilege_escalation
CVSS Score: 7.8
CWE Name:  Uncontrolled Resource Consumption
Summary: ** disputed ** four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c in the linux kernel before 5.3.8 allow attackers to cause a denial of service (memory consumption) by triggering mfd_add_hotplug_devices() or pm_genpd_add_device() failures, aka cid-57be09c6e874. note: third parties dispute the relevance of this because the attacker must already have privileges for module loading.
Access Authentication: NONE
Access Complexity: UNKNOWN
Access Vector: UNKNOWN
Impact (C/I/A): NONE/NONE/NONE
Published Date: 2019-11-18
Last Modified Date: 2019-11-18