CVE-2026-64449

CVE-2026-64449 relates to the Linux kernel staging/vme_user code. The vulnerability arises because the SLAVE-path helpers buffer_to_user() and buffer_from_user() copy count bytes using an unsafe offset (*ppos) into a fixed-size kern_buf (128 KiB), without bounding *ppos + count against size_buf. ...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: Staging: vmeuser: Fixed a potential UAF in tsi148dmalistadd. A match report warning is as follows: drivers/staging/vmeuser/vmetsi148.c:1757 tsi148dmalistadd warning: “&entry-list” was not removed from list. In tsi148dmalistadd, t...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992172)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992172 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: Fix possible UAF in tsi148dmalistadd Smatch report warning as follows:...

Linux Distros Unpatched Vulnerability : CVE-2022-50384

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: vmeuser: Fix possible UAF in tsi148dmalistadd Smatch report warning as follows: drivers/staging/vmeuser/vmetsi148.c:1757 tsi148dmalistadd warn:...

CVE-2022-50384

In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: Fix possible UAF in tsi148dmalistadd Smatch report warning as follows: drivers/staging/vmeuser/vmetsi148.c:1757 tsi148dmalistadd warn: '&entry-list' not removed from list In tsi148dmalistadd, the error path "got...