An out-of-bounds index was used when prefetching a BO VMA with the CONSULT_MEM_ADVISE_PREF_LOC region, causing the code to read outside the bounds of region_to_mem_type[]. The bug could lead to kernel memory corruption, possibly resulting in a system crash or unwanted information disclosure if an attacker can influence the indexed value. The fix resolves the incorrect preferred location calculation for BO VMAs used by both dGFX and iGPU tiles.

All Linux kernel deployments that incorporate the drm/xe/vm GPU driver and have not applied the fix provided in the referenced commits. The affected product is the Linux kernel; no version details are available.

The vulnerability is a kernel-level out-of-bounds read/exploit. EPSS is not available and the flaw is not listed in the CISA KEV catalog, but due to its kernel context it is reasonably high risk. Attackers would need to exploit privileged or local GPU memory paths; the likely vector involves loading a malicious texture or executing privileged code that triggers the prefetch routine. Given the absence of publicly available exploits, the exact likelihood of exploitation is uncertain, but the potential impact warrants patching.