[SRU OEM-5.10/OEM-5.14 0/1] CVE-2021-4002

Thadeu Lima de Souza Cascardo cascardo at canonical.com
Mon Nov 29 16:15:38 UTC 2021


https://www.openwall.com/lists/oss-security/2021/11/25/1

[Impact]
Missing TLB flush on hugetlb unmapping may allow a different process to
access another process memory, as long as it is using hugetlb mappings.

[Test case]
POC from the link above was used to test it on amd64.

[Potential regression]
hugetlb users may regress.

Nadav Amit (1):
  hugetlbfs: flush TLBs correctly after huge_pmd_unshare

 mm/hugetlb.c | 23 +++++++++++++++++++----
 1 file changed, 19 insertions(+), 4 deletions(-)

-- 
2.32.0




More information about the kernel-team mailing list