Riskcovery

CVE-2024-49570

drm/xe/tracing: Fix a potential TP_printk UAF

State
Published
Severity
7.8 High
Published
Feb 27, 2025
Updated
May 11, 2026
Reserved
Feb 27, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/xe/tracing: Fix a potential TP_printk UAF

The commit afd2627f727b ("tracing: Check "%s" dereference via the field and not the TP_printk format") exposes potential UAFs in the xe_bo_move trace event.

Fix those by avoiding dereferencing the xe_mem_type_to_name[] array at TP_printk time.

Since some code refactoring has taken place, explicit backporting may be needed for kernels older than 6.10.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • e46d3f813abd2383881c66d21ba04cee9fbdf3a9 to before 62cd174616ae3bf8a6cf468718f1ae74e5a07727Affected
  • e46d3f813abd2383881c66d21ba04cee9fbdf3a9 to before c9402da34611e1039ecccba3c1481c4866f7ca64Affected
  • e46d3f813abd2383881c66d21ba04cee9fbdf3a9 to before 07089083a526ea19daa72a1edf9d6e209615b77cAffected
LinuxLinux
  • 6.11Affected
  • before 6.11Not affected
  • 6.12.16 through 6.12.*Not affected
  • 6.13.4 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.