Re: [PATCH mm-hotfixes v3 0/4] mm: fix UAF caused by race between ptdump and vmap pgtable freeing

From: Lorenzo Stoakes (ARM)

Date: Wed Jul 15 2026 - 04:31:55 EST


On Tue, Jul 14, 2026 at 12:11:02PM -0700, Andrew Morton wrote:
> On Tue, 14 Jul 2026 18:24:22 +0100 Lorenzo Stoakes <ljs@xxxxxxxxxx> wrote:
>
> > Kernel page table walkers fall into two broad categories - those ranges
> > where no exclusion is required via walk_kernel_page_table_range_lockless()
> > and those where exclusion is required via walk_kernel_page_table_range()
> > or walk_page_range_debug().
> >
> > ...
> >
> > This series works around this by #ifndef CONFIG_ARM64'ing the mmap read
> > lock in vmap logic, then partially reverting commit fa93b45fd397 ("arm64:
> > Enable vmalloc-huge with ptdump"), keeping the enablement of huge vmap
> > support, and removing the ifdeffery with the partial revert patch.
>
> Thanks, I've updated mm-hotfixes-unstable.
>
> > v3:
> > * Rebased on latest master of Linus's tree.
> > * Accumulated tags, thanks everybody!
> > * Reworded commit messages as per Kiryl and Boris.
>
> I've confirmed that v3 introduced no code alterations.

Thanks!