CVE-2024-46866

A vulnerability in the Linux kernel's drm/xe/client driver was resolved. This issue was resolved by adding the missing buffer object (BO) locking in the show_meminfo() function. Inspecting the BO state without this lock led to a NULL pointer dereference (NPD) or use-after-free (UAF) issues due to concurrent state changes.

Red Hat Enterprise Linux is not vulnerable to this CVE, as it does not affect the versions or configurations of the Linux kernel used in its distributions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.