CVE-2022-50384: staging: vme_user: Fix possible UAF in tsi148_dma_list_add
In the Linux kernel, the following vulnerability has been resolved:
staging: vmeuser: Fix possible UAF in tsi148dmalistadd
Smatch report warning as follows:
drivers/staging/vmeuser/vmetsi148.c:1757 tsi148dmalistadd() warn: '&entry->list' not removed from list
In tsi148dmalistadd(), the error path "goto errdma" will not remove entry->list from list->entries, but entry will be freed, then list traversal may cause UAF.
Fix by removeing it from list->entries before free().
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In drivers/staging/vme_user/vme_tsi148.c (tsi148_dma_list_add()), fix the error path by removing entry->list from list->entries before calling free(), so list traversal cannot hit a freed entry (prevent UAF).
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50384?
CVE-2022-50384 is classified as a medium severity vulnerability.
How do I fix CVE-2022-50384?
To fix CVE-2022-50384, update to the latest version of the Linux kernel that addresses the vulnerability.
What components are affected by CVE-2022-50384?
CVE-2022-50384 affects the VME user driver in the Linux kernel.
What type of vulnerability is CVE-2022-50384?
CVE-2022-50384 is a use-after-free vulnerability.
Which versions of the Linux kernel are impacted by CVE-2022-50384?
CVE-2022-50384 affects specific versions of the Linux kernel that include the vulnerable code in the VME user driver.