On 3/11/22 12:38, Nadav Amit wrote: >> On Mar 11, 2022, at 11:41 AM, Dave Hansen <dave.hansen@xxxxxxxxx> wrote: ... >> Can any sane code trigger this? > > Well, regarding this question and the previous one: I do not think that > this scenario is possible today since mprotect() holds the mmap_lock > for write. There is no other code that I am aware of that toggles > the NX bit on a present entry. > > But I will not bet my life on it. That’s the reason for the somewhat > vague phrasing that I used.