Description
In the Linux kernel, the following vulnerability has been resolved: hugetlb: only adjust reservation during unmapping if mapcount is 0 Since df7a6d1f6405, __unmap_hugepage_range can adjust reservations. In the case of folio mapped in both a parent and a child, if the parent unmaps the range first, the reservation adjustment will result in an underflow of the reserved count. Once the child unmaps the range, the count is restored. Change __unmap_hugepage_range() to check the mapcount before adjusting the reservation.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
df7a6d1f64056aec572162c5d35ed9ff86ece6f3 to < b0b1b9ca80b795ed2223e76dd787db7067121fb9affecteddf7a6d1f64056aec572162c5d35ed9ff86ece6f3 to < a3c65af20cceb7f997847727636b4017326f845daffecteddf7a6d1f64056aec572162c5d35ed9ff86ece6f3 to < 0f001491e5a2ec69aa9d5dd6b799e5742245f9eaaffecteddf7a6d1f64056aec572162c5d35ed9ff86ece6f3 to < 5120b1e048d48596ffaec1a8412012a91adba73baffected
Linux Linux
Default version status: affected
6.9affected0 to < 6.9unaffected6.12.110 to ≤ 6.12.*unaffected6.18.50 to ≤ 6.18.*unaffected7.2.4 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected