In the Linux kernel, the following vulnerability has been resolved:
drm/xe/client: add missing bo locking in show_meminfo()
bo_meminfo() wants to inspect bo state like tt and the ttm resource, however this state can change at any point leading to stuff like NPD and UAF, if the bo lock is not held. Grab the bo lock when calling bo_meminfo(), ensuring we drop any spinlocks first. In the case of object_idr we now also need to hold a ref.
v2 (MattB) - Also add xe_bo_assert_held()
(cherry picked from commit 4f63d712fa104c3ebefcb289d1e733e86d8698c7)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-sourceUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-obs-buildUpgrade kernel-64kbUpgrade kernel-symsUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade kernel-64kb-devel | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-kvmUpgrade linux-image-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-genericUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-oem-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04a | Dec 13, 2024 | Sep 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub