Subject mm: fix inode UAF when splitting a file folio past EOF
Author kirill@shutemov.name
Date 2026-07-14 12:23:40 +0000 UTC
Version
Cc akpm@linux-foundation.org baohua@kernel.org baolin.wang@linux.alibaba.com david@kernel.org dev.jain@arm.com hao_zhang_kdev@163.com kas@kernel.org kirill@shutemov.name lance.yang@linux.dev liam@infradead.org linmiaohe@huawei.com linux-kernel@vger.kernel.org linux-mm@kvack.org ljs@kernel.org nao.horiguchi@gmail.com npache@redhat.com ryan.roberts@arm.com stable@vger.kernel.org usama.arif@linux.dev zhanghao1@kylinos.cn ziy@nvidia.com
Patches (5)
Name Content [All]
[PATCH v2 1/5] mm/memory-failure: keep the folio, not the poisoned subpage, locked across split [Body]
[PATCH v2 2/5] mm/huge_memory: refuse to split a file folio when the anchor is beyond EOF [Body]
[PATCH v2 3/5] mm/huge_memory: remove unused split_huge_page_to_order() [Body]
[PATCH v2 4/5] mm/huge_memory: remove unused can_split_folio() [Body]
[PATCH v2 5/5] mm/huge_memory: fold split_folio_to_list_to_order() into split_folio_to_order() [Body]
Series Summary
3 Findings
Sessions
Session 2026-07-14
3 Findings
ID (for dev) 92eb775c-00f7-4e32-9818-6779941457fc
Status finished
Triaged OK [Log] [Trajectory]
Execution Log [Link]
Test Base Patched Verdict
[KASAN] Build Base 0e35b9b6ec0ffcc5e23cbdec09f5c622ad532b53 [Config] passed [Log]
[KASAN] Boot test: Base 0e35b9b6ec0ffcc5e23cbdec09f5c622ad532b53 [Config] passed [Log]
[KASAN] Build Patched 0e35b9b6ec0ffcc5e23cbdec09f5c622ad532b53 [Config] [patched] passed [Log]
[KASAN] Boot test: Patched 0e35b9b6ec0ffcc5e23cbdec09f5c622ad532b53 [Config] [patched] passed [Log]
[KASAN] Fuzz 0e35b9b6ec0ffcc5e23cbdec09f5c622ad532b53 [Config] 0e35b9b6ec0ffcc5e23cbdec09f5c622ad532b53 [Config] [patched] passed [Log] [Artifacts]