Unverified Commit 29ef56fe authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!14575 etmem: fix use-after-free of mm in the scan release process 

Merge Pull Request from: @ci-robot 
 
PR sync from: chenrenhui <chenrenhui1@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/CJVQ4DYBKKK3CJESXBEVKXX7MXU57NZC/ 
etmem: fix use-after-free of mm in the scan release process

chenrenhui (1):
  etmem: fix use-after-free of mm in the scan release process


-- 
2.33.0
 
https://gitee.com/openeuler/kernel/issues/IBFHR4 
 
Link:https://gitee.com/openeuler/kernel/pulls/14575
parents 50daeac2 3055c8a1

fs/proc/task_mmu.c

+3 −3
Original line number Diff line number Diff line
@@ -1950,15 +1950,15 @@ static int mm_idle_release(struct inode *inode, struct file *file) 
	struct mm_struct *mm = file->private_data;

	int ret = 0;



	if (proc_page_scan_operations.release)

		ret = proc_page_scan_operations.release(inode, file);



	if (mm) {

		if (!mm_kvm(mm))

			flush_tlb_mm(mm);

		mmdrop(mm);

	}



	if (proc_page_scan_operations.release)

		ret = proc_page_scan_operations.release(inode, file);



	if (proc_page_scan_operations.owner)

		module_put(proc_page_scan_operations.owner);