Re: [PATCH] mm: Fix list corruption in put_pages_list

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, 6 Mar 2024 21:47:35 +0000 Matthew Wilcox <willy@xxxxxxxxxxxxx> wrote:

> On Wed, Mar 06, 2024 at 01:45:57PM -0800, Andrew Morton wrote:
> > On Wed,  6 Mar 2024 21:27:30 +0000 "Matthew Wilcox (Oracle)" <willy@xxxxxxxxxxxxx> wrote:
> > 
> > > My recent change to put_pages_list() dereferences folio->lru.next after
> > > returning the folio to the page allocator.  Usually this is now on the
> > > pcp list with other free folios, so we try to free an already-free
> > > folio.  This only happens with lists that have more than 15 entries, so
> > > it wasn't immediately discovered.  Revert to using list_for_each_safe()
> > > so we dereference lru.next before disposing of the folio.
> > > 
> > > Reported-by: "Borah, Chaitanya Kumar" <chaitanya.kumar.borah@xxxxxxxxx>
> > 
> > I'm unable to find the bug report on linux-mm.  Help please?
> 
> https://lore.kernel.org/intel-gfx/SJ1PR11MB61292145F3B79DA58ADDDA63B9232@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/
> 
> (wasn't cc'd to linux-mm)

Ah, OK, thanks.  I'll add that as a Closes: thingy.




[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Bugtraq]     [Linux OMAP]     [Linux MIPS]     [eCos]     [Asterisk Internet PBX]     [Linux API]

  Powered by Linux