Re: [PATCH 1/2] staging: vme_user: fix location monitor leak in fake bridge

From: Greg Kroah-Hartman

Date: Thu Jul 09 2026 - 07:03:16 EST


On Thu, Jul 09, 2026 at 01:50:16PM +0300, Dan Carpenter wrote:
> Hi Greg, I'm back from travel. Should we just delete staging/vme_user/?
> I don't know really if it's used but there are some pretty severe
> security issues with this code.

There are probably lots of issues with this code, but from what I
recall, the systems that use this do not have "untrusted" userspace
processes on it, so it shouldn't be an issue. If that's not the case,
then yes, it should be deleted, but really, no one cares about security
issues with code that adds TAINT_CRAP to the system when loaded :)

Martyn, any thoughts?

thanks,

greg k-h