An out-of-bounds memory access vulnerability in the Linux kernel drm/xe driver could allow a local authenticated attacker to cause system instability or potential information disclosure.

The vulnerability involves an out-of-bounds access within the drm/xe/vm component, triggered when the BO prefetch region is set to DRM_XE_CONSULT_MEM_ADVISE_PREF_LOC. This flaw requires a local attacker with low privileges to interact with the graphics driver, potentially resulting in a kernel panic or unauthorized memory reads.

The CVSS score of 7.3 reflects a high severity risk for local environments, primarily due to the potential for system crashes and information disclosure. While the attack requires local access, the nature of the vulnerability could allow an attacker to disrupt critical services or gain insight into kernel memory, leading to operational downtime or further escalation of privileges.

Immediate Action: Update the Linux kernel to version 6.18.44, 7.1.6, or 7.2 and later, as these versions incorporate the necessary fixes for the BO prefetch logic.

Proactive Monitoring: Monitor system logs for kernel oops or segmentation faults related to the drm/xe driver, which may indicate attempted exploitation.

Compensating Controls: Restrict access to graphics hardware interfaces for unauthorized users to minimize the attack surface, as the exploit requires local access to the affected driver.

Public Exploit Available: Unknown

The severity of this kernel-level vulnerability warrants prompt attention, especially in environments utilizing the xe driver for Intel graphics. Administrators should prioritize patching the kernel to the recommended versions to eliminate the risk of out-of-bounds memory access. Failure to address this could leave systems vulnerable to local instability or memory-based attacks.