CVE-2025-71099

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel’s DRM Xe driver contains a use-after-free issue within the OA configuration interface, specifically in the xe oa add config ioctl() function. The issue arises from accessing oa config->id after releasing the metrics lock, which protects the lifetime of oa config. An attacker could potentially exploit this by guessing the ID and calling xe oa remove config ioctl() at a precise moment, freeing oa config before it is dereferenced, leading to a use-after-free condition. The fix involves caching the ID in a local variable while the lock is held.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.