Nadav Amit 7af52b620d hugetlbfs: flush TLBs correctly after huge_pmd_unshare ... ANBZ: #636 commit a4a118f2ee upstream. When __unmap_hugepage_range() calls to huge_pmd_unshare() succeed, a TLB flush is missing. This TLB flush must be performed before releasing the i_mmap_rwsem, in order to prevent an unshared PMDs page from being released and reused before the TLB flush took place. Arguably, a comprehensive solution would use mmu_gather interface to batch the TLB flushes and the PMDs page release, however it is not an easy solution: (1) try_to_unmap_one() and try_to_migrate_one() also call huge_pmd_unshare() and they cannot use the mmu_gather interface; and (2) deferring the release of the page reference for the PMDs page until after i_mmap_rwsem is dropeed can confuse huge_pmd_unshare() into thinking PMDs are shared when they are not. Fix __unmap_hugepage_range() by adding the missing TLB flush, and forcing a flush when unshare is successful. Fixes: 24669e5847 ("hugetlb: use mmu_gather instead of a temporary linked list for accumulating pages)" # 3.6 Signed-off-by: Nadav Amit <namit@vmware.com> Reviewed-by: Mike Kravetz <mike.kravetz@oracle.com> Cc: Aneesh Kumar K.V <aneesh.kumar@linux.vnet.ibm.com> Cc: KAMEZAWA Hiroyuki <kamezawa.hiroyu@jp.fujitsu.com> Cc: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Fixes: CVE-2021-4002 Signed-off-by: Shile Zhang <shile.zhang@linux.alibaba.com> Reviewed-by: Gang Deng <gavin.dg@linux.alibaba.com> Reviewed-by: Tianjia Zhang <tianjia.zhang@linux.alibaba.com>		2022-03-14 02:45:15 +00:00
..
configs	[IA64] refresh arch/ia64/configs/* using "make savedefconfig"	2014-09-23 11:09:29 -07:00
dig	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
hp	ia64: Fix allnoconfig section mismatch for ioc_init/ioc_iommu_info	2018-08-22 14:12:47 -07:00
include	hugetlbfs: flush TLBs correctly after huge_pmd_unshare	2022-03-14 02:45:15 +00:00
kernel	.gitignore: add SPDX License Identifier	2020-09-02 17:52:15 +08:00
lib	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
mm	ia64: fix build errors by exporting paddr_to_nid()	2019-06-22 08:15:19 +02:00
oprofile	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
pci	PCI/MSI: Don't set up INTx if MSI or MSI-X is enabled	2018-03-13 15:03:36 -05:00
scripts	ia64: convert unwcheck.py to python3	2018-03-05 14:35:01 -08:00
sn	treewide: kzalloc() -> kcalloc()	2018-06-12 16:19:22 -07:00
uv	…
Kconfig	Mike Rapoport kindly fixed up ia64 to work with NO_BOOTMEM	2018-08-20 19:37:09 -07:00
Kconfig.debug	Kconfig: consolidate the "Kernel hacking" menu	2018-08-02 08:06:48 +09:00
Makefile	kbuild: add machine size to CHECKFLAGS	2018-06-01 11:36:58 +09:00
install.sh	…
module.lds	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00