diff options
| author | Suren Baghdasaryan <[email protected]> | 2025-02-26 18:55:09 +0000 |
|---|---|---|
| committer | Andrew Morton <[email protected]> | 2025-03-06 05:36:18 +0000 |
| commit | 927e926d72d9155fde3264459fe9bfd7b5e40d28 (patch) | |
| tree | ce7e6f6074916b9c8d36753e3dc35538dcf47c68 /mm/vmalloc.c | |
| parent | userfaultfd: do not block on locking a large folio with raised refcount (diff) | |
| download | kernel-927e926d72d9155fde3264459fe9bfd7b5e40d28.tar.gz kernel-927e926d72d9155fde3264459fe9bfd7b5e40d28.zip | |
userfaultfd: fix PTE unmapping stack-allocated PTE copies
Current implementation of move_pages_pte() copies source and destination
PTEs in order to detect concurrent changes to PTEs involved in the move.
However these copies are also used to unmap the PTEs, which will fail if
CONFIG_HIGHPTE is enabled because the copies are allocated on the stack.
Fix this by using the actual PTEs which were kmap()ed.
Link: https://lkml.kernel.org/r/[email protected]
Fixes: adef440691ba ("userfaultfd: UFFDIO_MOVE uABI")
Signed-off-by: Suren Baghdasaryan <[email protected]>
Reported-by: Peter Xu <[email protected]>
Reviewed-by: Peter Xu <[email protected]>
Cc: Andrea Arcangeli <[email protected]>
Cc: Barry Song <[email protected]>
Cc: Barry Song <[email protected]>
Cc: David Hildenbrand <[email protected]>
Cc: Hugh Dickins <[email protected]>
Cc: Jann Horn <[email protected]>
Cc: Kalesh Singh <[email protected]>
Cc: Liam R. Howlett <[email protected]>
Cc: Lokesh Gidra <[email protected]>
Cc: Lorenzo Stoakes <[email protected]>
Cc: Matthew Wilcow (Oracle) <[email protected]>
Cc: <[email protected]>
Signed-off-by: Andrew Morton <[email protected]>
Diffstat (limited to 'mm/vmalloc.c')
0 files changed, 0 insertions, 0 deletions
