# git rev-parse -q --verify ba422731316dde1e22dcc84b83c7349dc0ce1c3c^{commit} ba422731316dde1e22dcc84b83c7349dc0ce1c3c already have revision, skipping fetch # git checkout -q -f -B kisskb ba422731316dde1e22dcc84b83c7349dc0ce1c3c # git clean -qxdf # < git log -1 # commit ba422731316dde1e22dcc84b83c7349dc0ce1c3c # Author: Sean Christopherson # Date: Wed Jan 9 16:51:17 2019 -0800 # # mm/mmu_notifier: mm/rmap.c: Fix a mmu_notifier range bug in try_to_unmap_one # # The conversion to use a structure for mmu_notifier_invalidate_range_*() # unintentionally changed the usage in try_to_unmap_one() to init the # 'struct mmu_notifier_range' with vma->vm_start instead of @address, # i.e. it invalidates the wrong address range. Revert to the correct # address range. # # Manifests as KVM use-after-free WARNINGs and subsequent "BUG: Bad page # state in process X" errors when reclaiming from a KVM guest due to KVM # removing the wrong pages from its own mappings. # # Reported-by: leozinho29_eu@hotmail.com # Reported-by: Mike Galbraith # Reported-and-tested-by: Adam Borowski # Reviewed-by: Jérôme Glisse # Reviewed-by: Pankaj gupta # Cc: Christian König # Cc: Jan Kara # Cc: Matthew Wilcox # Cc: Ross Zwisler # Cc: Dan Williams # Cc: Paolo Bonzini # Cc: Radim Krčmář # Cc: Michal Hocko # Cc: Felix Kuehling # Cc: Ralph Campbell # Cc: John Hubbard # Cc: Andrew Morton # Fixes: ac46d4f3c432 ("mm/mmu_notifier: use structure for invalidate_range_start/end calls v2") # Signed-off-by: Sean Christopherson # Signed-off-by: Linus Torvalds # < /opt/cross/kisskb/korg/gcc-8.1.0-nolibc/x86_64-linux/bin/x86_64-linux-gcc --version # < /opt/cross/kisskb/korg/gcc-8.1.0-nolibc/x86_64-linux/bin/x86_64-linux-ld --version # < git log --format=%s --max-count=1 ba422731316dde1e22dcc84b83c7349dc0ce1c3c # < make -s -j 120 ARCH=x86 O=/kisskb/build/linus_x86_64_defconfig_x86_64-gcc8 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-8.1.0-nolibc/x86_64-linux/bin/x86_64-linux- x86_64_defconfig # make -s -j 120 ARCH=x86 O=/kisskb/build/linus_x86_64_defconfig_x86_64-gcc8 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-8.1.0-nolibc/x86_64-linux/bin/x86_64-linux- Completed OK # rm -rf /kisskb/build/linus_x86_64_defconfig_x86_64-gcc8 # Build took: 0:01:09.441613