Libin d778ca56a2 mm/huge_memory.c: fix potential NULL pointer dereference ...

commit a8f531ebc3 upstream.

In collapse_huge_page() there is a race window between releasing the
mmap_sem read lock and taking the mmap_sem write lock, so find_vma() may
return NULL.  So check the return value to avoid NULL pointer dereference.

collapse_huge_page
	khugepaged_alloc_page
		up_read(&mm->mmap_sem)
	down_write(&mm->mmap_sem)
	vma = find_vma(mm, address)

Signed-off-by: Libin <huawei.libin@huawei.com>
Acked-by: Kirill A. Shutemov <kirill.shutemov@linux.intel.com>
Reviewed-by: Wanpeng Li <liwanp@linux.vnet.ibm.com>
Reviewed-by: Michal Hocko <mhocko@suse.cz>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2013-09-26 17:15:51 -07:00

..

backing-dev.c

…

bootmem.c

mm: sparse: fix usemap allocation above node descriptor section

2012-10-02 10:30:36 -07:00

bounce.c

…

cleancache.c

…

compaction.c

mm: compaction: fix echo 1 > compact_memory return error issue

2013-01-17 08:50:43 -08:00

debug-pagealloc.c

…

dmapool.c

mm: dmapool: use provided gfp flags for all dma_alloc_coherent() calls

2012-12-17 10:37:44 -08:00

fadvise.c

mm/fadvise.c: drain all pagevecs if POSIX_FADV_DONTNEED fails to discard all pages

2013-02-28 06:59:01 -08:00

failslab.c

…

filemap_xip.c

…

filemap.c

…

fremap.c

…

highmem.c

…

huge_memory.c

mm/huge_memory.c: fix potential NULL pointer dereference

2013-09-26 17:15:51 -07:00

hugetlb.c

futex: Take hugepages into account when generating futex_key

2013-08-20 08:26:28 -07:00

hwpoison-inject.c

…

init-mm.c

…

internal.h

…

Kconfig

…

Kconfig.debug

…

kmemcheck.c

…

kmemleak-test.c

…

kmemleak.c

…

ksm.c

…

maccess.c

…

madvise.c

mm: Hold a file reference in madvise_remove

2012-07-16 09:04:43 -07:00

Makefile

…

memblock.c

x86, mm: Trim memory in memblock to be page aligned

2012-10-31 10:02:56 -07:00

memcontrol.c

memcg: fix multiple large threshold notifications

2013-09-26 17:15:50 -07:00

memory_hotplug.c

memory hotplug: fix section info double registration bug

2012-10-02 10:30:06 -07:00

memory-failure.c

mm: soft offline: split thp at the beginning of soft_offline_page()

2012-12-10 10:59:39 -08:00

memory.c

vm: add vm_iomap_memory() helper function

2013-04-25 21:19:56 -07:00

mempolicy.c

tmpfs mempolicy: fix /proc/mounts corrupting memory

2013-01-11 09:06:49 -08:00

mempool.c

…

migrate.c

mm: migration: add migrate_entry_wait_huge()

2013-06-20 11:58:46 -07:00

mincore.c

…

mlock.c

…

mm_init.c

…

mmap.c

hugetlbfs: fix mmap failure in unaligned size request

2013-05-19 10:54:48 -07:00

mmu_context.c

…

mmu_notifier.c

mm: mmu_notifier: re-fix freed page still mapped in secondary MMU

2013-06-07 12:49:25 -07:00

mmzone.c

…

mprotect.c

…

mremap.c

…

msync.c

…

nobootmem.c

memblock: free allocated memblock_reserved_regions later

2012-07-16 09:04:45 -07:00

nommu.c

vm: add no-mmu vm_iomap_memory() stub

2013-08-20 08:26:27 -07:00

oom_kill.c

…

page_alloc.c

mm/memory-hotplug: fix lowmem count overflow when offline pages

2013-08-04 16:26:07 +08:00

page_cgroup.c

…

page_io.c

…

page_isolation.c

…

page-writeback.c

mm: fix calculation of dirtyable memory

2013-01-11 09:06:48 -08:00

pagewalk.c

mm/pagewalk.c: walk_page_range should avoid VM_PFNMAP areas

2013-06-07 12:49:28 -07:00

percpu-km.c

…

percpu-vm.c

…

percpu.c

…

pgtable-generic.c

…

prio_tree.c

…

process_vm_access.c

Fix: compat_rw_copy_check_uvector() misuse in aio, readv, writev, and security keys

2013-03-14 11:29:51 -07:00

quicklist.c

…

readahead.c

…

rmap.c

mm: fix XFS oops due to dirty pages without buffers on s390

2012-10-31 10:02:56 -07:00

shmem.c

tmpfs: fix use-after-free of mempolicy object

2013-02-28 06:59:01 -08:00

slab.c

slab: fix the DEADLOCK issue on l3 alien lock

2012-10-13 05:38:37 +09:00

slob.c

…

slub.c

slub: fix a memory leak in get_partial_node()

2012-06-10 00:36:11 +09:00

sparse-vmemmap.c

…

sparse.c

mm/vmemmap: fix wrong use of virt_to_page

2012-12-10 10:59:39 -08:00

swap_state.c

swap: avoid read_swap_cache_async() race to deadlock while waiting on discard I/O completion

2013-06-20 11:58:45 -07:00

swap.c

…

swapfile.c

swap: fix shmem swapping when more than 8 areas

2012-06-22 11:36:55 -07:00

thrash.c

…

truncate.c

mm: fix invalidate_complete_page2() lock ordering

2012-10-13 05:38:51 +09:00

util.c

…

vmalloc.c

mm: fix faulty initialization in vmalloc_init()

2012-06-10 00:36:06 +09:00

vmscan.c

mm: bugfix: set current->reclaim_state to NULL while returning from kswapd()

2012-11-26 11:37:19 -08:00

vmstat.c

…