CVE-2022-50384

In the Linux kernel, the following vulnerability has been resolved:

staging: vme_user: Fix possible UAF in tsi148_dma_list_add

Smatch report warning as follows:

drivers/staging/vme_user/vme_tsi148.c:1757 tsi148_dma_list_add() warn: '&entry->list' not removed from list

In tsi148_dma_list_add(), the error path "goto err_dma" will not remove entry->list from list->entries, but entry will be freed, then list traversal may cause UAF.

Fix by removeing it from list->entries before free().

This issue poses no security risk to Red Hat customers because the vulnerable staging VME subsystem driver is not built or enabled in Red Hat Enterprise Linux kernels. The flaw stems from improper list cleanup during DMA allocation error handling, which would otherwise require access to specialized VME bus hardware. Consequently, default installations remain unaffected.