Leo Stone d3ac65d274 mm: huge_memory: handle strsep not finding delimiter ...

split_huge_pages_write() does not handle the case where strsep finds no
delimiter in the given string and sets the input buffer to NULL, which
allows this reproducer to trigger a protection fault.

Link: https://lkml.kernel.org/r/20241216042752.257090-2-leocstone@gmail.com
Signed-off-by: Leo Stone <leocstone@gmail.com>
Reported-by: syzbot+8a3da2f1bbf59227c289@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=8a3da2f1bbf59227c289
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>

2024-12-18 19:04:47 -08:00

..

damon

Merge tag 'mm-stable-2024-11-18-19-27' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2024-11-23 09:58:07 -08:00

kasan

Merge tag 'mm-hotfixes-stable-2024-12-07-22-39' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2024-12-08 11:26:13 -08:00

kfence

mm/kfence: add a new kunit test test_use_after_free_read_nofault()

2024-11-14 22:49:19 -08:00

kmsan

mm, kasan, kmsan: instrument copy_from/to_kernel_nofault

2024-11-06 20:11:14 -08:00

backing-dev.c

…

balloon_compaction.c

…

bootmem_info.c

bootmem: stop using page->index

2024-11-07 14:38:07 -08:00

cma_debug.c

…

cma_sysfs.c

…

cma.c

cma: enforce non-zero pageblock_order during cma_init_reserved_mem()

2024-11-14 22:49:19 -08:00

cma.h

…

compaction.c

…

debug_page_alloc.c

…

debug_page_ref.c

…

debug_vm_pgtable.c

mm/debug_vm_pgtable: Use pxdp_get() for accessing page table entries

2024-09-17 01:07:01 -07:00

debug.c

mm: open-code page_folio() in dump_page()

2024-12-05 19:54:45 -08:00

dmapool_test.c

…

dmapool.c

…

early_ioremap.c

…

execmem.c

alloc_tag: populate memory for module tags as needed

2024-11-07 14:25:16 -08:00

fadvise.c

fdget(), trivial conversions

2024-11-03 01:28:06 -05:00

fail_page_alloc.c

…

failslab.c

…

filemap.c

mm/filemap: don't call folio_test_locked() without a reference in next_uptodate_folio()

2024-12-05 19:54:47 -08:00

folio-compat.c

mm/writeback: add folio_mark_dirty_lock()

2024-11-05 11:14:32 +01:00

gup_test.c

…

gup_test.h

…

gup.c

mm/gup: handle NULL pages in unpin_user_pages()

2024-12-05 19:54:42 -08:00

highmem.c

…

hmm.c

…

huge_memory.c

mm: huge_memory: handle strsep not finding delimiter

2024-12-18 19:04:47 -08:00

hugetlb_cgroup.c

…

hugetlb_vmemmap.c

…

hugetlb_vmemmap.h

…

hugetlb.c

mm: use aligned address in copy_user_gigantic_page()

2024-12-18 19:04:42 -08:00

hwpoison-inject.c

…

init-mm.c

…

internal.h

mm: use clear_user_(high)page() for arch with special user folio handling

2024-12-18 19:04:43 -08:00

interval_tree.c

…

io-mapping.c

…

ioremap.c

…

Kconfig

Merge tag 'arm64-upstream' of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux

2024-11-18 18:10:37 -08:00

Kconfig.debug

…

khugepaged.c

mm: khugepaged: collapse_pte_mapped_thp() use pte_offset_map_rw_nolock()

2024-11-05 16:56:27 -08:00

kmemleak.c

kmemleak: iommu/iova: fix transient kmemleak false positive

2024-11-11 17:22:26 -08:00

ksm.c

Merge tag 'mm-stable-2024-11-18-19-27' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2024-11-23 09:58:07 -08:00

list_lru.c

mm/list_lru: simplify the list_lru walk callback function

2024-11-11 17:22:26 -08:00

maccess.c

kasan: migrate copy_user_test to kunit

2024-11-11 00:26:44 -08:00

madvise.c

mm: madvise: implement lightweight guard page mechanism

2024-11-11 00:26:45 -08:00

Makefile

mm: move the page fragment allocator from page_alloc into its own file

2024-11-11 10:56:26 -08:00

mapping_dirty_helpers.c

…

memblock.c

memblock: allow zero threshold in validate_numa_converage()

2024-12-01 21:08:56 +02:00

memcontrol-v1.c

Merge tag 'mm-stable-2024-11-18-19-27' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2024-11-23 09:58:07 -08:00

memcontrol-v1.h

mm: memcg: declare do_memsw_account inline

2024-12-05 19:54:46 -08:00

memcontrol.c

memcg/hugetlb: add hugeTLB counters to memcg

2024-11-14 22:49:19 -08:00

memfd.c

mm/hugetlb: simplify refs in memfd_alloc_folio

2024-09-26 14:01:44 -07:00

memory_hotplug.c

kaslr: rename physmem_end and PHYSMEM_END to direct_map_physmem_end

2024-11-06 20:11:11 -08:00

memory-failure.c

mm/memory-failure: replace sprintf() with sysfs_emit()

2024-11-11 00:26:46 -08:00

memory-tiers.c

memory tiers: use default_dram_perf_ref_source in log message

2024-09-26 14:01:44 -07:00

memory.c

mm: use clear_user_(high)page() for arch with special user folio handling

2024-12-18 19:04:43 -08:00

mempolicy.c

mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM

2024-12-05 19:54:43 -08:00

mempool.c

…

memremap.c

…

memtest.c

…

migrate_device.c

…

migrate.c

mm/codetag: swap tags when migrate pages

2024-12-05 19:54:46 -08:00

mincore.c

…

mlock.c

mm/mlock: set the correct prev on failure

2024-11-07 14:14:58 -08:00

mm_init.c

Merge tag 'memblock-v6.13-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/rppt/memblock

2024-11-27 11:13:25 -08:00

mm_slot.h

…

mmap_lock.c

mm: mmap_lock: check trace_mmap_lock_$type_enabled() instead of regcount

2024-11-11 17:22:28 -08:00

mmap.c

mm: respect mmap hint address when aligning for THP

2024-12-05 19:54:46 -08:00

mmu_gather.c

…

mmu_notifier.c

…

mmzone.c

…

mprotect.c

mm: add PTE_MARKER_GUARD PTE marker

2024-11-11 00:26:44 -08:00

mremap.c

Merge tag 'mm-stable-2024-11-18-19-27' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2024-11-23 09:58:07 -08:00

mseal.c

mm: madvise: implement lightweight guard page mechanism

2024-11-11 00:26:45 -08:00

msync.c

…

nommu.c

nommu: pass NULL argument to vma_iter_prealloc()

2024-11-11 17:20:23 -08:00

numa_emulation.c

…

numa_memblks.c

mm: numa_clear_kernel_node_hotplug: Add NUMA_NO_NODE check for node id

2024-10-28 21:40:40 -07:00

numa.c

…

oom_kill.c

mm: move mm flags to mm_types.h

2024-11-05 16:56:26 -08:00

page_alloc.c

mm/page_alloc: don't call pfn_to_page() on possibly non-existent PFN in split_large_buddy()

2024-12-18 19:04:45 -08:00

page_counter.c

…

page_ext.c

…

page_frag_cache.c

mm: page_frag: use __alloc_pages() to replace alloc_pages_node()

2024-11-11 10:56:27 -08:00

page_idle.c

…

page_io.c

mm: add per-order mTHP swpin counters

2024-11-11 00:26:43 -08:00

page_isolation.c

…

page_owner.c

…

page_poison.c

…

page_reporting.c

…

page_reporting.h

…

page_table_check.c

…

page_vma_mapped.c

mm: mass constification of folio/page pointers

2024-11-07 14:38:07 -08:00

page-writeback.c

Merge tag 'fuse-update-6.13' of git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/fuse

2024-11-26 12:41:27 -08:00

pagewalk.c

mm: pagewalk: add the ability to install PTEs

2024-11-11 00:26:44 -08:00

percpu-internal.h

…

percpu-km.c

…

percpu-stats.c

…

percpu-vm.c

…

percpu.c

mm: use page->private instead of page->index in percpu

2024-11-07 14:38:07 -08:00

pgalloc-track.h

…

pgtable-generic.c

mm: add RCU annotation to pte_offset_map(_lock)

2024-12-18 19:04:43 -08:00

process_vm_access.c

mm: refactor mm_access() to not return NULL

2024-11-05 16:56:23 -08:00

ptdump.c

…

readahead.c

Revert "readahead: properly shorten readahead when falling back to do_page_cache_ra()"

2024-12-05 19:54:44 -08:00

rmap.c

mm: mass constification of folio/page pointers

2024-11-07 14:38:07 -08:00

rodata_test.c

…

secretmem.c

secretmem: disable memfd_secret() if arch cannot set direct map

2024-10-09 12:47:19 -07:00

shmem_quota.c

…

shmem.c

mm: shmem: fix ShmemHugePages at swapout

2024-12-18 19:04:42 -08:00

show_mem.c

mm/show_mem: use str_yes_no() helper in show_free_areas()

2024-11-07 14:38:08 -08:00

shrinker_debug.c

…

shrinker.c

mm: shrinker: avoid memleak in alloc_shrinker_info

2024-10-31 20:27:04 -07:00

shuffle.c

…

shuffle.h

…

slab_common.c

Merge tag 'slab-for-6.13-v2' of git://git.kernel.org/pub/scm/linux/kernel/git/vbabka/slab

2024-11-25 16:51:24 -08:00

slab.h

mm/slub: Avoid list corruption when removing a slab from the full list

2024-11-16 21:19:39 +01:00

slub.c

memcg: slub: fix SUnreclaim for post charged objects

2024-12-10 09:25:39 +01:00

sparse-vmemmap.c

mm: define general function pXd_init()

2024-11-11 17:22:27 -08:00

sparse.c

bootmem: stop using page->index

2024-11-07 14:38:07 -08:00

swap_cgroup.c

…

swap_slots.c

…

swap_state.c

mm: swap: use str_true_false() helper function

2024-11-06 20:11:14 -08:00

swap.c

Merge tag 'mm-stable-2024-11-18-19-27' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2024-11-23 09:58:07 -08:00

swap.h

mm: fix swap_read_folio_zeromap() for large folios with partial zeromap

2024-09-17 01:07:01 -07:00

swapfile.c

mm, swap: fix allocation and scanning race with swapoff

2024-11-14 15:25:07 -08:00

truncate.c

Merge tag 'mm-stable-2024-11-18-19-27' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2024-11-23 09:58:07 -08:00

usercopy.c

…

userfaultfd.c

mm: remove unused hugepage for vma_alloc_folio()

2024-11-06 20:11:12 -08:00

util.c

Merge tag 'mm-nonmm-stable-2024-11-24-02-05' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2024-11-25 16:09:48 -08:00

vma_internal.h

mm: isolate mmap internal logic to mm/vma.c

2024-11-06 20:11:19 -08:00

vma.c

mm: correctly reference merged VMA

2024-12-18 19:04:42 -08:00

vma.h

mm: isolate mmap internal logic to mm/vma.c

2024-11-06 20:11:19 -08:00

vmalloc.c

vmalloc: fix accounting with i915

2024-12-18 19:04:45 -08:00

vmpressure.c

…

vmscan.c

mm/vmscan: wake up flushers conditionally to avoid cgroup OOM

2024-11-07 14:38:07 -08:00

vmstat.c

memcg/hugetlb: add hugeTLB counters to memcg

2024-11-14 22:49:19 -08:00

workingset.c

mm/list_lru: simplify the list_lru walk callback function

2024-11-11 17:22:26 -08:00

z3fold.c

…

zbud.c

…

zpool.c

…

zsmalloc.c

mm/zsmalloc: use memcpy_from/to_page whereever possible

2024-11-07 14:38:07 -08:00

zswap.c

mm/list_lru: simplify the list_lru walk callback function

2024-11-11 17:22:26 -08:00