averello/linux-stable-mirror
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2026-04-08 12:02:33 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
e49253b5046c4375bbf0794de6fe217447cdfb1f
linux-stable-mirror/mm
History
Kemeng Shi 91b370800b mm: swap: fix potential buffer overflow in setup_clusters() 
commit 152c1339dc upstream.

In setup_swap_map(), we only ensure badpages are in range (0, last_page].
As maxpages might be < last_page, setup_clusters() will encounter a buffer
overflow when a badpage is >= maxpages.

Only call inc_cluster_info_page() for badpage which is < maxpages to fix
the issue.

Link: https://lkml.kernel.org/r/20250522122554.12209-4-shikemeng@huaweicloud.com
Fixes: b843786b0b ("mm: swapfile: fix SSD detection with swapfile on btrfs")
Signed-off-by: Kemeng Shi <shikemeng@huaweicloud.com>
Reviewed-by: Baoquan He <bhe@redhat.com>
Cc: Johannes Weiner <hannes@cmpxchg.org>
Cc: Kairui Song <kasong@tencent.com>
Cc: <stable@vger.kernel.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2025-08-15 12:14:14 +02:00
..
damon
mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write
2025-07-06 11:01:38 +02:00
kasan
kasan: use vmalloc_dump_obj() for vmalloc error reports
2025-08-01 09:48:43 +01:00
kfence
kfence: skip __GFP_THISNODE allocations on NUMA systems
2025-02-17 10:05:31 +01:00
kmsan
dma: kmsan: export kmsan_handle_dma() for modules
2025-03-13 13:01:58 +01:00
backing-dev.c
…
balloon_compaction.c
…
bootmem_info.c
…
cma_debug.c
…
cma_sysfs.c
…
cma.c
mm/cma: add cma_{alloc,free}_folio()
2024-09-03 21:15:36 -07:00
cma.h
…
compaction.c
mm/compaction: fix bug in hugetlb handling pathway
2025-04-25 10:47:53 +02:00
debug_page_alloc.c
…
debug_page_ref.c
…
debug_vm_pgtable.c
mm/debug_vm_pgtable: Use pxdp_get() for accessing page table entries
2024-09-17 01:07:01 -07:00
debug.c
mm: open-code page_folio() in dump_page()
2024-12-14 20:03:33 +01:00
dmapool_test.c
…
dmapool.c
…
early_ioremap.c
…
execmem.c
…
fadvise.c
introduce fd_file(), convert all accessors to it.
2024-08-12 22:00:43 -04:00
fail_page_alloc.c
fault-inject: improve build for CONFIG_FAULT_INJECTION=n
2024-09-01 20:43:33 -07:00
failslab.c
fault-inject: improve build for CONFIG_FAULT_INJECTION=n
2024-09-01 20:43:33 -07:00
filemap.c
mm: fix filemap_get_folios_contig returning batches of identical folios
2025-04-25 10:47:53 +02:00
folio-compat.c
mm: remove putback_lru_page()
2024-09-09 16:38:59 -07:00
gup_test.c
…
gup_test.h
…
gup.c
mm/gup: revert "mm: gup: fix infinite loop within __get_longterm_locked"
2025-07-06 11:01:43 +02:00
highmem.c
…
hmm.c
mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery
2025-08-15 12:14:13 +02:00
huge_memory.c
mm/huge_memory: fix dereferencing invalid pmd migration entry
2025-05-18 08:24:51 +02:00
hugetlb_cgroup.c
mm: memcg: don't call propagate_protected_usage() needlessly
2024-09-01 20:25:50 -07:00
hugetlb_vmemmap.c
mm/hugetlb_vmemmap: don't synchronize_rcu() without HVO
2024-09-01 20:25:45 -07:00
hugetlb_vmemmap.h
…
hugetlb.c
mm/hugetlb: unshare page tables during VMA split, not before
2025-06-27 11:11:40 +01:00
hwpoison-inject.c
…
init-mm.c
…
internal.h
mm: fix folio_pte_batch() on XEN PV
2025-05-18 08:24:51 +02:00
interval_tree.c
…
io-mapping.c
…
ioremap.c
…
Kconfig
resource: remove dependency on SPARSEMEM from GET_FREE_REGION
2024-10-28 21:40:39 -07:00
Kconfig.debug
slub: Introduce CONFIG_SLUB_RCU_DEBUG
2024-08-27 14:12:51 +02:00
khugepaged.c
mm: khugepaged: fix call hpage_collapse_scan_file() for anonymous vma
2025-08-01 09:48:47 +01:00
kmemleak.c
mm: kmemleak: fix upper boundary check for physical address objects
2025-02-17 10:05:36 +01:00
ksm.c
mm/ksm: fix -Wsometimes-uninitialized from clang-21 in advisor_mode_show()
2025-08-01 09:48:42 +01:00
list_lru.c
mm: list_lru: fix UAF for memory cgroup
2024-08-07 18:33:56 -07:00
maccess.c
…
madvise.c
mm: close theoretical race where stale TLB entries could linger
2025-06-27 11:11:38 +01:00
Makefile
mm: introduce numa_emulation
2024-09-03 21:15:31 -07:00
mapping_dirty_helpers.c
…
memblock.c
memblock: Accept allocated memory before use in memblock_double_array()
2025-05-18 08:24:54 +02:00
memcontrol-v1.c
mm/thp: fix deferred split unqueue naming and locking
2024-11-05 16:49:54 -08:00
memcontrol-v1.h
mm: memcg: declare do_memsw_account inline
2024-12-14 20:03:33 +01:00
memcontrol.c
memcg: always call cond_resched() after fn()
2025-05-29 11:03:22 +02:00
memfd.c
mm: reinstate ability to map write-sealed memfd mappings read-only
2025-01-09 13:33:54 +01:00
memory_hotplug.c
mm/hwpoison: introduce folio_contain_hwpoisoned_page() helper
2025-04-20 10:15:50 +02:00
memory-failure.c
mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list
2025-08-01 09:48:44 +01:00
memory-tiers.c
memory tiers: use default_dram_perf_ref_source in log message
2024-09-26 14:01:44 -07:00
memory.c
mm: fix apply_to_existing_page_range()
2025-04-25 10:47:53 +02:00
mempolicy.c
mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
2024-12-14 20:03:32 +01:00
mempool.c
…
memremap.c
…
memtest.c
…
migrate_device.c
mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()
2025-02-27 04:30:22 -08:00
migrate.c
mm/migrate: fix shmem xarray update during migration
2025-03-28 22:03:30 +01:00
mincore.c
…
mlock.c
mm/mlock: set the correct prev on failure
2024-11-07 14:14:58 -08:00
mm_init.c
mm: drop CONFIG_HAVE_ARCH_NODEDATA_EXTENSION
2024-09-03 21:15:28 -07:00
mm_slot.h
…
mmap_lock.c
…
mmap.c
mm: reinstate ability to map write-sealed memfd mappings read-only
2025-01-09 13:33:54 +01:00
mmu_gather.c
…
mmu_notifier.c
mm: move internal core VMA manipulation functions to own file
2024-09-01 20:25:54 -07:00
mmzone.c
mm: improve code consistency with zonelist_* helper functions
2024-09-01 20:25:55 -07:00
mprotect.c
mm: refactor map_deny_write_exec()
2024-11-05 16:49:55 -08:00
mremap.c
mm/mremap: correctly handle partial mremap() of VMA starting at 0
2025-04-20 10:15:49 +02:00
mseal.c
Merge tag 'mm-stable-2024-09-20-02-31' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2024-09-21 07:29:05 -07:00
msync.c
…
nommu.c
nommu: pass NULL argument to vma_iter_prealloc()
2024-11-11 17:20:23 -08:00
numa_emulation.c
mm: introduce numa_emulation
2024-09-03 21:15:31 -07:00
numa_memblks.c
mm: numa_clear_kernel_node_hotplug: Add NUMA_NO_NODE check for node id
2024-10-28 21:40:40 -07:00
numa.c
mm: make range-to-target_node lookup facility a part of numa_memblks
2024-09-03 21:15:32 -07:00
oom_kill.c
memcg: fix soft lockup in the OOM process
2025-02-08 09:58:19 +01:00
page_alloc.c
page_pool: Move pp_magic check into helper functions
2025-06-19 15:31:42 +02:00
page_counter.c
mm, memcg: cg2 memory{.swap,}.peak write handlers
2024-09-01 20:25:53 -07:00
page_ext.c
mm: don't account memmap per-node
2024-08-15 22:16:14 -07:00
page_idle.c
…
page_io.c
mm: count zeromap read and set for swapout and swapin
2024-11-11 00:00:37 -08:00
page_isolation.c
mm/hugetlb: wait for hugetlb folios to be freed
2025-03-22 12:54:28 -07:00
page_owner.c
…
page_poison.c
…
page_reporting.c
…
page_reporting.h
…
page_table_check.c
…
page_vma_mapped.c
mm: make page_mapped_in_vma() hugetlb walk aware
2025-04-20 10:15:49 +02:00
page-writeback.c
mm: fix ratelimit_pages update error in dirty_ratio_handler()
2025-06-27 11:11:22 +01:00
pagewalk.c
mm/pagewalk: fix usage of pmd_leaf()/pud_leaf() without present check
2024-10-28 21:40:38 -07:00
percpu-internal.h
…
percpu-km.c
…
percpu-stats.c
…
percpu-vm.c
…
percpu.c
percpu: remove pcpu_alloc_size()
2024-09-01 20:26:04 -07:00
pgalloc-track.h
…
pgtable-generic.c
…
process_vm_access.c
…
ptdump.c
…
readahead.c
mm/readahead: fix large folio support in async readahead
2025-01-09 13:33:54 +01:00
rmap.c
mm/rmap: reject hugetlb folios in folio_make_device_exclusive()
2025-04-20 10:15:49 +02:00
rodata_test.c
…
secretmem.c
fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass
2025-07-10 16:05:09 +02:00
shmem_quota.c
shmem_quota: build the object file conditionally to the config option
2024-09-01 20:25:45 -07:00
shmem.c
mm/hwpoison: introduce folio_contain_hwpoisoned_page() helper
2025-04-20 10:15:50 +02:00
show_mem.c
mm/show_mem.c: report alloc tags in human readable units
2024-09-17 01:07:00 -07:00
shrinker_debug.c
mm: shrinker: use min() to improve shrinker_debugfs_scan_write()
2024-09-03 21:15:40 -07:00
shrinker.c
mm: shrinker: avoid memleak in alloc_shrinker_info
2024-10-31 20:27:04 -07:00
shuffle.c
…
shuffle.h
…
slab_common.c
slab: Fix too strict alignment check in create_cache()
2024-12-09 10:41:07 +01:00
slab.h
mm/slub: Avoid list corruption when removing a slab from the full list
2024-12-09 10:41:04 +01:00
slub.c
mm, slab: clean up slab->obj_exts always
2025-05-09 09:50:49 +02:00
sparse-vmemmap.c
LoongArch: Set initial pte entry with PAGE_GLOBAL for kernel space
2024-10-21 22:11:19 +08:00
sparse.c
Merge tag 'x86-urgent-2024-09-01' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2024-09-01 14:43:08 -07:00
swap_cgroup.c
mm: attempt to batch free swap entries for zap_pte_range()
2024-09-03 21:15:33 -07:00
swap_slots.c
…
swap_state.c
mm: add nr argument in mem_cgroup_swapin_uncharge_swap() helper to support large folios
2024-09-17 01:07:01 -07:00
swap.c
mm: page_alloc: move mlocked flag clearance into free_pages_prepare()
2024-11-11 17:20:23 -08:00
swap.h
mm: fix swap_read_folio_zeromap() for large folios with partial zeromap
2024-09-17 01:07:01 -07:00
swapfile.c
mm: swap: fix potential buffer overflow in setup_clusters()
2025-08-15 12:14:14 +02:00
truncate.c
mm: Fix missing folio invalidation calls during truncation
2024-08-24 16:09:16 +02:00
usercopy.c
…
userfaultfd.c
mm: userfaultfd: fix race of userfaultfd_move and swap cache
2025-07-10 16:05:14 +02:00
util.c
mm: only enforce minimum stack gap size if it's sensible
2024-09-01 20:26:02 -07:00
vma_internal.h
mm/hugetlb: unshare page tables during VMA split, not before
2025-06-27 11:11:40 +01:00
vma.c
mm/vma: reset VMA iterator on commit_merge() OOM failure
2025-07-06 11:01:48 +02:00
vma.h
mm/vma: add give_up_on_oom option on modify/merge, use in uffd release
2025-04-25 10:48:06 +02:00
vmalloc.c
mm/vmalloc: leave lazy MMU mode on PTE mapping error
2025-07-17 18:37:14 +02:00
vmpressure.c
…
vmscan.c
mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list
2025-08-01 09:48:44 +01:00
vmstat.c
vmstat: call fold_vm_zone_numa_events() before show per zone NUMA event
2024-12-09 10:41:01 +01:00
workingset.c
…
z3fold.c
mm/z3fold: add __percpu annotation to *unbuddied pointer in struct z3fold_pool
2024-09-01 20:25:56 -07:00
zbud.c
…
zpool.c
…
zsmalloc.c
mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n
2025-08-01 09:48:44 +01:00
zswap.c
mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead()
2025-04-10 14:39:40 +02:00