userfaultfd: use RCU to free the task struct when fork fails if MEMCG
euler inclusion category: bugfix bugzilla: 10989 CVE: NA ------------------------------------------------ MEMCG depends on the task structure not to be freed under rcu_read_lock() in get_mem_cgroup_from_mm() after it dereferences mm->owner. A better fix would be to avoid registering forked vmas in userfaultfd contexts reported to the monitor, if case fork ends up failing. Signed-off-by:Andrea Arcangeli <aarcange@redhat.com> Signed-off-by:
zhong jiang <zhongjiang@huawei.com> Reviewed-by:
Miao Xie <miaoxie@huawei.com> Signed-off-by:
Yang Yingliang <yangyingliang@huawei.com>
Loading
Please sign in to comment