In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
lib\/test_hmm: fail dmirror_fault() when the mirrored mm is gone<\/p>\n
dmirror_fault() is called from the dmirror_read() and dmirror_write()
\nretry loops after dmirror_do_read() or dmirror_do_write() finds a missing
\ndevice page table entry.<\/p>\n
If the mirrored mm has already exited, mmget_not_zero() fails. The
\ncurrent code returns 0 in that case, which tells the caller that faulting
\nsucceeded even though no page was faulted and no device page table entry
\nwas installed. The caller then retries the same address, hits -ENOENT
\nagain, and can loop forever without making progress.<\/p>\n
Return -EFAULT instead, so the ioctl fails when the mirrored mm is no
\nlonger faultable.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
lib\/test_hmm: fail dmirror_fault() when the mirrored mm is gone<\/p>\n
dmirror_fault() is called from the dmirror_read() and dmirror_writ<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-25800","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/25800","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=25800"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=25800"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=25800"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}