APPLIED[F/H/I]: [SRU][J/I/H/F][PATCH 0/1] Drop "UBUNTU: SAUCE: cachefiles: Page leaking in cachefiles_read_backing_file while vmscan is active"

Kleber Souza kleber.souza at canonical.com
Thu Nov 4 15:58:55 UTC 2021


On 19.10.21 12:33, Andrea Righi wrote:
> BugLink: https://bugs.launchpad.net/bugs/1947709
> 
> [Impact]
> 
> "UBUNTU: SAUCE: cachefiles: Page leaking in cachefiles_read_backing_file while
> vmscan is active" has been applied to fix a page leaking issue.
> 
> However a slightly different fix has been applied upstream:
> 
>   9a24ce5b66f9 ("cachefiles: Fix page leak in cachefiles_read_backing_file while vmscan is active")
> 
> Basically we are fixing the same issue in two different ways at the same time,
> but even worse our patch an introduce a potential NULL pointer dereference: we
> do a put_page(newpage) and set newpage = NULL in the main for() loop and then
> we may do additional put_page(newpage) after the main for loop if
> ret == -EEXIST, that would trigger the NULL pointer dereference.
> 
> [Test case]
> 
> No test case or reproducer is available at the moment, this issue has been
> found simply by reviewing the code.
> 
> [Fix]
> 
> Drop the SAUCE patch and rely on the upstream fix.
> 
> [Regression potential]
> 
> If the analysis is not correct we may re-introduce a page leak in cachefiles
> (NFS for example), but it seems unlikely to happen, since the upstream fix is
> addressing the page leaking already.
> 
> 

Applied to [focal/hirsute/impish]:linux.

Thanks,
Kleber




More information about the kernel-team mailing list