VYPR
High severity7.8NVD Advisory· Published Sep 18, 2025· Updated Jun 17, 2026

CVE-2022-50384

CVE-2022-50384

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: vme_user: Fix possible UAF in tsi148_dma_list_add

Smatch report warning as follows:

drivers/staging/vme_user/vme_tsi148.c:1757 tsi148_dma_list_add() warn: '&entry->list' not removed from list

In tsi148_dma_list_add(), the error path "goto err_dma" will not remove entry->list from list->entries, but entry will be freed, then list traversal may cause UAF.

Fix by removeing it from list->entries before free().

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • osv-coords
    Range: >= 4.2.0, < 4.9.337
  • Linux/Kernelllm-create3 versions
    (expand)+ 2 more
    • (no CPE)
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=4.2,<4.9.337
    • (no CPE)range: 4.2

Patches

Vulnerability mechanics

References

9

News mentions

0

No linked articles in our index yet.