On Mon, Feb 19, 2024 at 05:28:02PM +0200, Mike Rapoport wrote: > From: Lokesh Gidra <lokeshgidra@xxxxxxxxxx> > > In mfill_atomic_hugetlb(), mmap_changing isn't being checked > again if we drop mmap_lock and reacquire it. When the lock is not held, > mmap_changing could have been incremented. This is also inconsistent > with the behavior in mfill_atomic(). > > Link: https://lkml.kernel.org/r/20240117223729.1444522-1-lokeshgidra@xxxxxxxxxx > Fixes: df2cc96e77011 ("userfaultfd: prevent non-cooperative events vs mcopy_atomic races") > Signed-off-by: Lokesh Gidra <lokeshgidra@xxxxxxxxxx> > Cc: Andrea Arcangeli <aarcange@xxxxxxxxxx> > Cc: Mike Rapoport <rppt@xxxxxxxxxx> > Cc: Axel Rasmussen <axelrasmussen@xxxxxxxxxx> > Cc: Brian Geffon <bgeffon@xxxxxxxxxx> > Cc: David Hildenbrand <david@xxxxxxxxxx> > Cc: Jann Horn <jannh@xxxxxxxxxx> > Cc: Kalesh Singh <kaleshsingh@xxxxxxxxxx> > Cc: Matthew Wilcox (Oracle) <willy@xxxxxxxxxxxxx> > Cc: Nicolas Geoffray <ngeoffray@xxxxxxxxxx> > Cc: Peter Xu <peterx@xxxxxxxxxx> > Cc: Suren Baghdasaryan <surenb@xxxxxxxxxx> > Cc: <stable@xxxxxxxxxxxxxxx> > Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx> > (cherry picked from commit 67695f18d55924b2013534ef3bdc363bc9e14605) > Signed-off-by: Mike Rapoport (IBM) <rppt@xxxxxxxxxx> All now queued up, thanks. greg k-h
