Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Paolo Bonzini c19d8de4e6 mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) ... commit 01e67e04c28170c47700c2c226d732bbfedb1ad0 upstream. If an mremap() syscall with old_size=0 ends up in move_page_tables(), it will call invalidate_range_start()/invalidate_range_end() unnecessarily, i.e. with an empty range. This causes a WARN in KVM's mmu_notifier. In the past, empty ranges have been diagnosed to be off-by-one bugs, hence the WARNing. Given the low (so far) number of unique reports, the benefits of detecting more buggy callers seem to outweigh the cost of having to fix cases such as this one, where userspace is doing something silly. In this particular case, an early return from move_page_tables() is enough to fix the issue. Link: https://lkml.kernel.org/r/20220329173155.172439-1-pbonzini@redhat.com Reported-by: syzbot+6bde52d89cfdf9f61425@syzkaller.appspotmail.com Signed-off-by: Paolo Bonzini <pbonzini@redhat.com> Cc: Sean Christopherson <seanjc@google.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2022-04-15 14:18:39 +02:00
..
kasan
backing-dev.c	mm: bdi: initialize bdi_min_ratio when bdi is unregistered	2021-12-14 14:49:00 +01:00
balloon_compaction.c
cleancache.c
cma.c
cma.h
cma_debug.c
compaction.c
debug.c
debug_page_ref.c
dmapool.c
early_ioremap.c
fadvise.c
failslab.c
filemap.c	mm/filemap: fix storing to a THP shadow entry	2021-06-10 13:37:15 +02:00
frame_vector.c
frontswap.c
gup.c
gup_benchmark.c
highmem.c
hmm.c
huge_memory.c	mm/huge_memory.c: don't discard hugepage if other processes are mapping it	2021-07-14 16:53:47 +02:00
hugetlb.c	hugetlbfs: flush TLBs correctly after huge_pmd_unshare	2021-11-26 10:47:23 +01:00
hugetlb_cgroup.c
hwpoison-inject.c
init-mm.c
internal.h	mm/thp: fix vma_address() if virtual address below file offset	2021-06-30 08:47:52 -04:00
interval_tree.c
Kconfig
Kconfig.debug
khugepaged.c	khugepaged: fix wrong result value for trace_mm_collapse_huge_page_isolate()	2021-05-19 10:08:27 +02:00
kmemleak-test.c
kmemleak.c	mm/kmemleak: reset tag when compare object pointer	2022-04-15 14:18:01 +02:00
ksm.c	ksm: fix potential missing rmap_item for stable_node	2021-05-19 10:08:27 +02:00
list_lru.c
maccess.c
madvise.c
Makefile
memblock.c	memblock: use kfree() to release kmalloced memblock regions	2022-03-02 11:41:18 +01:00
memcontrol.c	mm/memcontrol: return 1 from cgroup.memory __setup() handler	2022-04-15 14:18:29 +02:00
memfd.c	memfd: fix F_SEAL_WRITE after shmem huge page allocated	2022-03-08 19:07:49 +01:00
memory-failure.c	mm/memory-failure: make sure wait for page writeback in memory_failure	2021-06-23 14:41:23 +02:00
memory.c	mm,hwpoison: unmap poisoned page before invalidation	2022-04-15 14:18:01 +02:00
memory_hotplug.c	mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range()	2021-09-22 12:26:43 +02:00
mempolicy.c	mempolicy: mbind_range() set_policy() after vma_merge()	2022-04-15 14:18:00 +02:00
mempool.c
memremap.c
memtest.c
migrate.c	mm, thp: use head page in __migration_entry_wait()	2021-06-30 08:47:52 -04:00
mincore.c
mlock.c
mm_init.c
mmap.c	mm/mmap: return 1 from stack_guard_gap __setup() handler	2022-04-15 14:18:29 +02:00
mmu_context.c
mmu_gather.c
mmu_notifier.c
mmzone.c
mprotect.c
mremap.c	mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)	2022-04-15 14:18:39 +02:00
msync.c
nommu.c
oom_kill.c	mm, oom: do not trigger out_of_memory from the #PF	2021-11-17 09:48:50 +01:00
page-writeback.c
page_alloc.c	mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node	2022-04-15 14:18:00 +02:00
page_counter.c
page_ext.c
page_idle.c
page_io.c
page_isolation.c
page_owner.c
page_poison.c
page_vma_mapped.c	mm/thp: another PVMW_SYNC fix in page_vma_mapped_walk()	2021-06-30 08:47:55 -04:00
pagewalk.c
percpu-internal.h
percpu-km.c
percpu-stats.c
percpu-vm.c
percpu.c
pgtable-generic.c	mm/thp: fix __split_huge_pmd_locked() on shmem migration entry	2021-06-30 08:47:52 -04:00
process_vm_access.c
readahead.c
rmap.c	mm: fix race between MADV_FREE reclaim and blkdev direct IO read	2022-04-15 14:18:36 +02:00
rodata_test.c
shmem.c	shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode	2022-01-27 09:19:29 +01:00
shuffle.c
shuffle.h
slab.c
slab.h	mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag	2021-11-26 10:47:21 +01:00
slab_common.c	mm: slab: fix kmem_cache_create failed when sysfs node not destroyed	2021-07-25 14:35:14 +02:00
slob.c
slub.c	mm, slub: fix potential memoryleak in kmem_cache_open()	2021-10-27 09:54:28 +02:00
sparse-vmemmap.c
sparse.c	mm/sparse: add the missing sparse_buffer_fini() in error branch	2021-05-14 09:44:32 +02:00
swap.c
swap_cgroup.c
swap_slots.c
swap_state.c
swapfile.c
truncate.c	mm/thp: unmap_mapping_page() to fix THP truncate_cleanup_page()	2021-06-30 08:47:53 -04:00
usercopy.c	mm/usercopy: return 1 from hardened_usercopy __setup() handler	2022-04-15 14:18:30 +02:00
userfaultfd.c
util.c
vmacache.c
vmalloc.c
vmpressure.c
vmscan.c	mm,vmscan: fix divide by zero in get_scan_count	2021-09-22 12:26:37 +02:00
vmstat.c
workingset.c
z3fold.c	mm/z3fold: fix potential memory leak in z3fold_destroy_pool()	2021-07-14 16:53:47 +02:00
zbud.c
zpool.c
zsmalloc.c	mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()	2021-11-17 09:48:47 +01:00
zswap.c