CVE-2022-50384

staging: vme_user: Fix possible UAF in tsi148_dma_list_add

High · published September 18, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
6.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

staging: vme_user: Fix possible UAF in tsi148_dma_list_add

Smatch report warning as follows:

drivers/staging/vme_user/vme_tsi148.c:1757 tsi148_dma_list_add() warn:

'&entry->list' not removed from list

In tsi148_dma_list_add(), the error path "goto err_dma" will not

remove entry->list from list->entries, but entry will be freed,

then list traversal may cause UAF.

Fix by removeing it from list->entries before free().

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00171 · 6.2th percentile
Published
2025-09-18T13:33Z
EPSS history
Timeline
  • 18 SEP 13:33Z
    staging: vme_user: Fix possible UAF in tsi148_dma_list_add
    cvelistv5