Unverified Commit 6e98ebf5 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!14724 etmem: fix use-after-free of mm in the scan release process 

Merge Pull Request from: @ci-robot 
 
PR sync from: chenrenhui <chenrenhui1@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/BCSIOOHPZ5DPJJAM535OARCCRCTBSTMH/ 
etmem: fix use-after-free of mm in the scan release process

chenrenhui (1):
  etmem: fix use-after-free of mm in the scan release process


-- 
2.33.0
 
https://gitee.com/openeuler/kernel/issues/IBFHR4 
 
Link:https://gitee.com/openeuler/kernel/pulls/14724

 

Reviewed-by: default avatarLi Nan <linan122@huawei.com>
Reviewed-by: default avatarKefeng Wang <wangkefeng.wang@huawei.com>
Signed-off-by: default avatarLi Nan <linan122@huawei.com>
Signed-off-by: default avatarZhang Peng <zhangpeng362@huawei.com>
parents 1e381fff bdb21ae4

fs/proc/etmem_proc.c

+3 −3
Original line number Diff line number Diff line
@@ -90,15 +90,15 @@ static int mm_idle_release(struct inode *inode, struct file *file) 
	struct mm_struct *mm = file->private_data;

	int ret = 0;



	if (proc_page_scan_operations.release)

		ret = proc_page_scan_operations.release(inode, file);



	if (mm) {

		if (!mm_kvm(mm))

			flush_tlb_mm(mm);

		mmdrop(mm);

	}



	if (proc_page_scan_operations.release)

		ret = proc_page_scan_operations.release(inode, file);



	if (proc_page_scan_operations.owner)

		module_put(proc_page_scan_operations.owner);