In the Linux kernel, the following vulnerability has been resolved: mm/migrate: fix shmem xarray update during migration A shmem folio can be either in page cache or in swap cache, but not at the same time. Namely, once it is in swap cache, folio->mapping should be NULL, and the folio is no longer in a shmem mapping. In _foliomigratemapping(), to determine the number of xarray entries to update, foliotestswapbacked() is used, but that conflates shmem in page cache case and shmem in swap cache case. It leads to xarray multi-index entry corruption, since it turns a sibling entry to a normal entry during xasstore() (see [1] for a userspace reproduction). Fix it by only using foliotestswapcache() to determine whether xarray is storing swap cache entries or not to choose the right number of xarray entries to update. [1] https://lore.kernel.org/linux-mm/Z8idPCkaJW1IChjT@casper.infradead.org/ Note: In _splithugepage(), foliotestanon() && foliotestswapcache() is used to get swapcache address space, but that ignores the shmem folio in swap cache case. It could lead to NULL pointer dereferencing when a in-swap-cache shmem folio is split at _xastore(), since !foliotestanon() is true and folio->mapping is NULL. But fortunately, its caller splithugepagetolisttoorder() bails out early with EBUSY when folio->mapping is NULL. So no need to take care of it here.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-azure-6.11-cloud-tools-6.11.0-1018", "binary_version": "6.11.0-1018.18~24.04.1" }, { "binary_name": "linux-azure-6.11-headers-6.11.0-1018", "binary_version": "6.11.0-1018.18~24.04.1" }, { "binary_name": "linux-azure-6.11-tools-6.11.0-1018", "binary_version": "6.11.0-1018.18~24.04.1" }, { "binary_name": "linux-buildinfo-6.11.0-1018-azure", "binary_version": "6.11.0-1018.18~24.04.1" }, { "binary_name": "linux-cloud-tools-6.11.0-1018-azure", "binary_version": "6.11.0-1018.18~24.04.1" }, { "binary_name": "linux-headers-6.11.0-1018-azure", "binary_version": "6.11.0-1018.18~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-1018-azure", "binary_version": "6.11.0-1018.18~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-1018-azure-dbgsym", "binary_version": "6.11.0-1018.18~24.04.1" }, { "binary_name": "linux-modules-6.11.0-1018-azure", "binary_version": "6.11.0-1018.18~24.04.1" }, { "binary_name": "linux-modules-extra-6.11.0-1018-azure", "binary_version": "6.11.0-1018.18~24.04.1" }, { "binary_name": "linux-modules-iwlwifi-6.11.0-1018-azure", "binary_version": "6.11.0-1018.18~24.04.1" }, { "binary_name": "linux-tools-6.11.0-1018-azure", "binary_version": "6.11.0-1018.18~24.04.1" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.11.0-1016-gcp", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-buildinfo-6.11.0-1016-gcp-64k", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-gcp-6.11-headers-6.11.0-1016", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-gcp-6.11-lib-rust-6.11.0-1016-gcp", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-gcp-6.11-tools-6.11.0-1016", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-headers-6.11.0-1016-gcp", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-headers-6.11.0-1016-gcp-64k", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-1016-gcp", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-1016-gcp-64k", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-1016-gcp-64k-dbgsym", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-1016-gcp-dbgsym", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-modules-6.11.0-1016-gcp", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-modules-6.11.0-1016-gcp-64k", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-modules-extra-6.11.0-1016-gcp", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-modules-extra-6.11.0-1016-gcp-64k", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-tools-6.11.0-1016-gcp", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-tools-6.11.0-1016-gcp-64k", "binary_version": "6.11.0-1016.16~24.04.1" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.11.0-28-generic", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-buildinfo-6.11.0-28-generic-64k", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-cloud-tools-6.11.0-28-generic", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-headers-6.11.0-28-generic", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-headers-6.11.0-28-generic-64k", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-hwe-6.11-cloud-tools-6.11.0-28", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-hwe-6.11-headers-6.11.0-28", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-hwe-6.11-lib-rust-6.11.0-28-generic", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-hwe-6.11-tools-6.11.0-28", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-image-6.11.0-28-generic", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-image-6.11.0-28-generic-dbgsym", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-28-generic", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-28-generic-64k", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-28-generic-64k-dbgsym", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-28-generic-dbgsym", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-modules-6.11.0-28-generic", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-modules-6.11.0-28-generic-64k", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-modules-extra-6.11.0-28-generic", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-modules-ipu6-6.11.0-28-generic", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-modules-ipu7-6.11.0-28-generic", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-modules-iwlwifi-6.11.0-28-generic", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-modules-usbio-6.11.0-28-generic", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-modules-vision-6.11.0-28-generic", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-tools-6.11.0-28-generic", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-tools-6.11.0-28-generic-64k", "binary_version": "6.11.0-28.28~24.04.1" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.11.0-1015-lowlatency", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-buildinfo-6.11.0-1015-lowlatency-64k", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-cloud-tools-6.11.0-1015-lowlatency", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-headers-6.11.0-1015-lowlatency", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-headers-6.11.0-1015-lowlatency-64k", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-image-unsigned-6.11.0-1015-lowlatency", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-image-unsigned-6.11.0-1015-lowlatency-64k", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-image-unsigned-6.11.0-1015-lowlatency-64k-dbgsym", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-image-unsigned-6.11.0-1015-lowlatency-dbgsym", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-lowlatency-hwe-6.11-cloud-tools-6.11.0-1015", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-lowlatency-hwe-6.11-headers-6.11.0-1015", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-lowlatency-hwe-6.11-lib-rust-6.11.0-1015-lowlatency", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-lowlatency-hwe-6.11-tools-6.11.0-1015", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-modules-6.11.0-1015-lowlatency", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-modules-6.11.0-1015-lowlatency-64k", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-modules-iwlwifi-6.11.0-1015-lowlatency", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-tools-6.11.0-1015-lowlatency", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-tools-6.11.0-1015-lowlatency-64k", "binary_version": "6.11.0-1015.16~24.04.2" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.11.0-1024-oem", "binary_version": "6.11.0-1024.24" }, { "binary_name": "linux-headers-6.11.0-1024-oem", "binary_version": "6.11.0-1024.24" }, { "binary_name": "linux-image-unsigned-6.11.0-1024-oem", "binary_version": "6.11.0-1024.24" }, { "binary_name": "linux-image-unsigned-6.11.0-1024-oem-dbgsym", "binary_version": "6.11.0-1024.24" }, { "binary_name": "linux-modules-6.11.0-1024-oem", "binary_version": "6.11.0-1024.24" }, { "binary_name": "linux-modules-ipu6-6.11.0-1024-oem", "binary_version": "6.11.0-1024.24" }, { "binary_name": "linux-modules-ipu7-6.11.0-1024-oem", "binary_version": "6.11.0-1024.24" }, { "binary_name": "linux-modules-iwlwifi-6.11.0-1024-oem", "binary_version": "6.11.0-1024.24" }, { "binary_name": "linux-modules-usbio-6.11.0-1024-oem", "binary_version": "6.11.0-1024.24" }, { "binary_name": "linux-modules-vision-6.11.0-1024-oem", "binary_version": "6.11.0-1024.24" }, { "binary_name": "linux-oem-6.11-headers-6.11.0-1024", "binary_version": "6.11.0-1024.24" }, { "binary_name": "linux-oem-6.11-tools-6.11.0-1024", "binary_version": "6.11.0-1024.24" }, { "binary_name": "linux-tools-6.11.0-1024-oem", "binary_version": "6.11.0-1024.24" } ] }