Linux Kernel Local Use-After-Free Vulnerability in DRM Subsystem

A use-after-free vulnerability has been addressed in the Linux kernel's Direct Rendering Manager (DRM) subsystem, specifically within the XE driver. The issue arose in the error handling path of the 'xe_migrate_clear' function, where the code improperly waited on a potentially unstable, locally-generated fence. This mismanagement could lead to a use-after-free condition. The vulnerability has been resolved by modifying the code to correctly wait on the local fence.

Impact

Exploitation of this vulnerability could lead to a use-after-free condition, potentially allowing for memory corruption or arbitrary code execution.