Description

In the Linux kernel, the following vulnerability has been resolved: drm/xe/tracing: Fix a potential TP_printk UAF The commit afd2627f727b ("tracing: Check "%s" dereference via the field and not the TP_printk format") exposes potential UAFs in the xe_bo_move trace event. Fix those by avoiding dereferencing the xe_mem_type_to_name[] array at TP_printk time. Since some code refactoring has taken place, explicit backporting may be needed for kernels older than 6.10.

INFO

Published Date :

2025-02-27T02:18:06.123Z

Last Modified :

2025-05-04T09:39:26.379Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2024-49570 vulnerability.

Vendors Products
Linux
  • Linux Kernel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-49570.

URL Resource
https://git.kernel.org/stable/c/07089083a526ea19daa72a1edf9d6e209615b77c cve-icon cve-icon
https://git.kernel.org/stable/c/62cd174616ae3bf8a6cf468718f1ae74e5a07727 cve-icon cve-icon
https://git.kernel.org/stable/c/c9402da34611e1039ecccba3c1481c4866f7ca64 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025022601-CVE-2024-49570-d2e7@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-49570 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-49570 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact