Re: [PATCH mm-hotfixes v3 0/4] mm: fix UAF caused by race between ptdump and vmap pgtable freeing

From: Andrew Morton

Date: Tue Jul 14 2026 - 15:11:27 EST


On Tue, 14 Jul 2026 18:24:22 +0100 Lorenzo Stoakes <ljs@xxxxxxxxxx> wrote:

> Kernel page table walkers fall into two broad categories - those ranges
> where no exclusion is required via walk_kernel_page_table_range_lockless()
> and those where exclusion is required via walk_kernel_page_table_range()
> or walk_page_range_debug().
>
> ...
>
> This series works around this by #ifndef CONFIG_ARM64'ing the mmap read
> lock in vmap logic, then partially reverting commit fa93b45fd397 ("arm64:
> Enable vmalloc-huge with ptdump"), keeping the enablement of huge vmap
> support, and removing the ifdeffery with the partial revert patch.

Thanks, I've updated mm-hotfixes-unstable.

> v3:
> * Rebased on latest master of Linus's tree.
> * Accumulated tags, thanks everybody!
> * Reworded commit messages as per Kiryl and Boris.

I've confirmed that v3 introduced no code alterations.