14 matches found
CVE-2026-64449
A flaw was found in the Linux kernel's vmeuser module. This vulnerability allows a local user to cause a slab-out-of-bounds write or read due to improper validation of buffer sizes in the VME slave path. When a user-supplied VME window size exceeds the internal buffer, data can be copied beyond t...
UBUNTU-CVE-2026-64449
In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: bound slave read/write to the kernbuf size The SLAVE-path helpers buffertouser and bufferfromuser copy 'count' bytes into/out of the fixed-size kernbuf sizebuf == PCIBUFSIZE == 0x20000, 128 KiB using ppos as the...
CVE-2026-64449
CVE-2026-64449 relates to the Linux kernel staging/vme_user code. The vulnerability arises because the SLAVE-path helpers buffer_to_user() and buffer_from_user() copy count bytes using an unsafe offset (*ppos) into a fixed-size kern_buf (128 KiB), without bounding *ppos + count against size_buf. ...
CVE-2026-64449
In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: bound slave read/write to the kernbuf size The SLAVE-path helpers buffertouser and bufferfromuser copy 'count' bytes into/out of the fixed-size kernbuf sizebuf == PCIBUFSIZE == 0x20000, 128 KiB using ppos as the...
CVE-2026-64449 staging: vme_user: bound slave read/write to the kern_buf size
In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: bound slave read/write to the kernbuf size The SLAVE-path helpers buffertouser and bufferfromuser copy 'count' bytes into/out of the fixed-size kernbuf sizebuf == PCIBUFSIZE == 0x20000, 128 KiB using ppos as the...
EUVD-2026-48793
In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: bound slave read/write to the kernbuf size The SLAVE-path helpers buffertouser and bufferfromuser copy 'count' bytes into/out of the fixed-size kernbuf sizebuf == PCIBUFSIZE == 0x20000, 128 KiB using ppos as the...
CVE-2026-64449
In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: bound slave read/write to the kernbuf size The SLAVE-path helpers buffertouser and bufferfromuser copy 'count' bytes into/out of the fixed-size kernbuf sizebuf == PCIBUFSIZE == 0x20000, 128 KiB using ppos as the...
Linux Distros Unpatched Vulnerability : CVE-2026-64449
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: vmeuser: bound slave read/write to the kernbuf size The SLAVE-path helpers buffertouser and bufferfromuser copy 'count' bytes into/out of the fixed-siz...
Astra Linux – Vulnerability in Linux 5.10, Linux
In the Linux kernel, the following vulnerability has been resolved: Staging: vmeuser: Fixed a potential UAF in tsi148dmalistadd. A match report warning is as follows: drivers/staging/vmeuser/vmetsi148.c:1757 tsi148dmalistadd warning: “&entry-list” was not removed from list. In tsi148dmalistadd, t...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004119)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004119 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: Fix possible UAF in tsi148dmalistadd Smatch report warning as follows:...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992172)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992172 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: Fix possible UAF in tsi148dmalistadd Smatch report warning as follows:...
Linux Distros Unpatched Vulnerability : CVE-2022-50384
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: vmeuser: Fix possible UAF in tsi148dmalistadd Smatch report warning as follows: drivers/staging/vmeuser/vmetsi148.c:1757 tsi148dmalistadd warn:...
CVE-2022-50384
CVE-2022-50384 is a Linux kernel vulnerability in staging/vme_user (tsi148_dma_list_add) where an error path could free an entry without removing it from list->entries, risking use-after-free. The connected documents confirm the root cause is the failure to remove &entry->list from list->...
CVE-2022-50384
In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: Fix possible UAF in tsi148dmalistadd Smatch report warning as follows: drivers/staging/vmeuser/vmetsi148.c:1757 tsi148dmalistadd warn: '&entry-list' not removed from list In tsi148dmalistadd, the error path "got...