Linux Kernel UAF Vulnerability in DRM/xe Tracing

A use-after-free vulnerability has been identified in the Linux kernel's Direct Rendering Manager (DRM) Xe tracing component. This issue arises from the xe_bo_move trace event, where the xe_mem_type_to_name array is improperly dereferenced during TP_printk formatting, creating potential memory safety risks. The vulnerability affects Linux kernel versions prior to 6.10, and explicit backporting may be necessary for older kernels.

Impact

Exploitation of this vulnerability could lead to memory corruption issues, allowing for use-after-free scenarios that could be exploited to execute arbitrary code or cause a denial-of-service condition.