CVE-2024-44978

In the Linux kernel, the following vulnerability has been resolved:

drm/xe: Free job before xe_exec_queue_put

Free job depends on job->vm being valid, the last xe_exec_queue_put can destroy the VM. Prevent UAF by freeing job before xe_exec_queue_put.

(cherry picked from commit 32a42c93b74c8ca6d0915ea3eba21bceff53042f)

Red Hat has evaluated this vulnerability as having Moderate severity because exploitation requires local system access with privileges to interact with the Intel Xe graphics device node, and triggering the use-after-free condition depends on specific execution timing. The Intel Xe graphics driver is not included in standard Red Hat Enterprise Linux releases, significantly limiting exposure in production environments. On systems where the driver is active, an authenticated local user could potentially leverage the flaw to cause a system crash or attempt privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.