[SRU Hirsute/Impish 0/1] CVE-2021-4002

Thadeu Lima de Souza Cascardo cascardo at canonical.com
Fri Nov 26 01:02:38 UTC 2021


https://www.openwall.com/lists/oss-security/2021/11/25/1

[Impact]
Missing TLB flush on hugetlb unmapping may allow a different process to
access another process memory, as long as it is using hugetlb mappings.

[Test case]
POC from the link above was used to test it on amd64.

Built tested on other architectures so far. Will test on them as time allows.

[Potential regression]
hugetlb users may regress.

[Notice]
Other backports are in progress and will be tested on other architectures
as well.

Nadav Amit (1):
  hugetlbfs: flush TLBs correctly after huge_pmd_unshare

 mm/hugetlb.c | 23 +++++++++++++++++++----
 1 file changed, 19 insertions(+), 4 deletions(-)

-- 
2.32.0




More information about the kernel-team mailing list