An out-of-bounds index was used when prefetching a buffer object VMA with the CONSULT_MEM_ADVISE_PREF_LOC region, causing the code to read outside the bounds of region_to_mem_type[] and resulting in kernel memory corruption (CWE-787). The bug also includes a null dereference that can lead to a crash. The fix resolves the incorrect preferred location calculation for BO VMAs used by both dGFX and iGPU tiles.

All Linux kernel deployments that incorporate the drm/xe/vm GPU driver and have not applied the fix provided in the referenced commits. The affected product is the Linux kernel; no specific version details are available.

The vulnerability is a kernel-level out-of-bounds read (CWE-787). EPSS < 1% indicates a very low exploitation probability and the flaw is not listed in the CISA KEV catalog, but due to its kernel context it is a high risk. Attackers would need to exploit privileged or local GPU memory paths; the likely vector involves loading a malicious texture or executing privileged code that triggers the prefetch routine. The CVSS score of 7.3 indicates high severity, and given the lack of publicly available exploits, the exact likelihood of exploitation is uncertain, but the potential impact warrants patching.