Unverified Commit 80e5830c authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!14849 [sync] PR-14724: etmem: fix use-after-free of mm in the scan release process 

Merge Pull Request from: @openeuler-sync-bot 
 

Origin pull request: 
https://gitee.com/openeuler/kernel/pulls/14724 
 
PR sync from: chenrenhui <chenrenhui1@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/BCSIOOHPZ5DPJJAM535OARCCRCTBSTMH/ 
etmem: fix use-after-free of mm in the scan release process

chenrenhui (1):
  etmem: fix use-after-free of mm in the scan release process


-- 
2.33.0
 
https://gitee.com/openeuler/kernel/issues/IBFHR4 
 
Link:https://gitee.com/openeuler/kernel/pulls/14849
parents 5cc57e85 1e7f6ab7

fs/proc/etmem_proc.c

+3 −3
Original line number Diff line number Diff line
@@ -90,15 +90,15 @@ static int mm_idle_release(struct inode *inode, struct file *file) 
	struct mm_struct *mm = file->private_data;

	int ret = 0;



	if (proc_page_scan_operations.release)

		ret = proc_page_scan_operations.release(inode, file);



	if (mm) {

		if (!mm_kvm(mm))

			flush_tlb_mm(mm);

		mmdrop(mm);

	}



	if (proc_page_scan_operations.release)

		ret = proc_page_scan_operations.release(inode, file);



	if (proc_page_scan_operations.owner)

		module_put(proc_page_scan_operations.owner);