On Mon, Nov 27, 2017 at 12:03:43AM -0800, Eric Biggers wrote: > Commit cb0631fd3cf9 ("x86/mm: fix use-after-free of vma during userfaultfd > fault") went into mainline without Cc: stable. It appears to be a > use-after-free reachable by unprivileged users -- at least with > CONFIG_USERFAULTFD=y. Can it please be applied to 4.9-stable? Now queued up, thanks, greg k-h