Messages in this thread | | | Subject | Re: [PATCH 1/1] mm: fix use-after-free bug when mm->mmap is reused after being freed | From | Rik van Riel <> | Date | Tue, 15 Feb 2022 15:26:57 -0500 |
| |
On Tue, 2022-02-15 at 12:19 -0800, Suren Baghdasaryan wrote: > After exit_mmap frees all vmas in the mm, mm->mmap needs to be reset, > otherwise it points to a vma that was freed and when reused leads to > a use-after-free bug. > > Reported-by: syzbot+2ccf63a4bd07cf39cab0@syzkaller.appspotmail.com > Suggested-by: Michal Hocko <mhocko@suse.com> > Signed-off-by: Suren Baghdasaryan <surenb@google.com> > Reviewed-by: Rik van Riel <riel@surriel.com>
-- All Rights Reversed. [unhandled content-type:application/pgp-signature] | |