CVE-2024-49570

In the Linux kernel, the following vulnerability has been resolved:

drm/xe/tracing: Fix a potential TP_printk UAF

The commit afd2627f727b ("tracing: Check "%s" dereference via the field and not the TP_printk format") exposes potential UAFs in the xe_bo_move trace event.

Fix those by avoiding dereferencing the xe_mem_type_to_name[] array at TP_printk time.

Since some code refactoring has taken place, explicit backporting may be needed for kernels older than 6.10.

This vulnerability is rated as having Moderate impact for Red Hat Enterprise Linux because exploitation requires local access and elevated privileges to configure and capture kernel tracepoints. The issue stems from a use-after-free condition in the Intel Xe driver's tracepoint subsystem when processing buffer object movement events, which could result in a local denial of service or disclosure of kernel memory. Furthermore, exposure is constrained to systems equipped with Intel Xe graphics hardware that have active kernel tracing enabled.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.