Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-49570

drm/xe/tracing: Fix a potential TP_printk UAF

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: drm/xe/tracing: Fix a potential TP_printk UAF The commit afd2627f727b ("tracing: Check "%s" dereference via the field and not the TP_printk format") exposes potential UAFs in the xe_bo_move trace event. Fix those by avoiding dereferencing the xe_mem_type_to_name[] array at TP_printk time. Since some code refactoring has taken place, explicit backporting may be needed for kernels older than 6.10.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e46d3f813abd2383881c66d21ba04cee9fbdf3a9 to < 62cd174616ae3bf8a6cf468718f1ae74e5a07727affected
  • e46d3f813abd2383881c66d21ba04cee9fbdf3a9 to < c9402da34611e1039ecccba3c1481c4866f7ca64affected
  • e46d3f813abd2383881c66d21ba04cee9fbdf3a9 to < 07089083a526ea19daa72a1edf9d6e209615b77caffected

Linux Linux

Default version status: affected

  • 6.11affected
  • 0 to < 6.11unaffected
  • 6.12.16 to ≤ 6.12.*unaffected
  • 6.13.4 to ≤ 6.13.*unaffected
  • 6.14 to ≤ *unaffected

References