In the Linux kernel, the following vulnerability has been resolved:
drm/xe/tracing: Fix a potential TP_printk UAF
The commit afd2627f727b ("tracing: Check "%s" dereference via the field and not the TP_printk format") exposes potential UAFs in the xe_bo_move trace event.
Fix those by avoiding dereferencing the xe_mem_type_to_name[] array at TP_printk time.
Since some code refactoring has taken place, explicit backporting may be needed for kernels older than 6.10.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-zfcpdump-develUpgrade kernel-64k-modules-extraUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-64k-develUpgrade kernel-uki-virtUpgrade kernel-64k-develUpgrade rtlaUpgrade kernel-debug-modules-coreUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdumpUpgrade perfUpgrade kernel-rt-debugUpgrade kernel-debug-uki-virtUpgrade kernel-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade rvUpgrade kernel-64kUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-64k-modules-extraUpgrade kernel-toolsUpgrade kernel-docUpgrade kernel-rt-64k-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-64k-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-debug-coreUpgrade libperfUpgrade kernel-rt-64k-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64kUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-headersUpgrade kernel-abi-stablelistsUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-coreUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-core | Nov 20, 2025 | Nov 11, 2025 |
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Feb 27, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 9, 2025 | Feb 27, 2025 |
| Rocky_linux | — | Upgrade kernelUpgrade kernel-develUpgrade kernel-zfcpdump-devel-matchedUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-debug-coreUpgrade rvUpgrade kernel-toolsUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-coreUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-s390xUpgrade kernel-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade libperf-debuginfoUpgrade libperfUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade perf-debuginfoUpgrade rtlaUpgrade perfUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-debuginfo | Feb 5, 2026 | Nov 21, 2025 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-raspiUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-genericUpgrade linux-image-oracle-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-oracleUpgrade linux-image-oem-24.04bUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-6.11.0-1016-oracle-64k | May 21, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub