tmakin/tegra-linux-noble
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
rel-38
tegra-linux-noble/mm
T
History
Liu Shixin 26d6c6ff96 mm/compaction: fix UBSAN shift-out-of-bounds warning 
BugLink: https://bugs.launchpad.net/bugs/2114239

commit d1366e74342e75555af2648a2964deb2d5c92200 upstream.

syzkaller reported a UBSAN shift-out-of-bounds warning of (1UL << order)
in isolate_freepages_block().  The bogus compound_order can be any value
because it is union with flags.  Add back the MAX_PAGE_ORDER check to fix
the warning.

Link: https://lkml.kernel.org/r/20250123021029.2826736-1-liushixin2@huawei.com
Fixes: 3da0272a4c ("mm/compaction: correctly return failure with bogus compound_order in strict mode")
Signed-off-by: Liu Shixin <liushixin2@huawei.com>
Reviewed-by: Kemeng Shi <shikemeng@huaweicloud.com>
Acked-by: David Hildenbrand <david@redhat.com>
Reviewed-by: Oscar Salvador <osalvador@suse.de>
Cc: Baolin Wang <baolin.wang@linux.alibaba.com>
Cc: David Hildenbrand <david@redhat.com>
Cc: Kemeng Shi <shikemeng@huaweicloud.com>
Cc: Matthew Wilcox <willy@infradead.org>
Cc: Mel Gorman <mgorman@techsingularity.net>
Cc: Nanyong Sun <sunnanyong@huawei.com>
Cc: <stable@vger.kernel.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Noah Wager <noah.wager@canonical.com>
Signed-off-by: Mehmet Basaran <mehmet.basaran@canonical.com>
2025-06-15 10:39:36 +03:00
..
damon
mm/damon/vaddr: fix issue in damon_va_evenly_split_region()
2025-03-14 14:31:51 +01:00
kasan
kasan: make report_lock a raw spinlock
2025-03-14 14:31:41 +01:00
kfence
kfence: skip __GFP_THISNODE allocations on NUMA systems
2025-06-15 10:39:31 +03:00
kmsan
kmsan: do not wipe out origin when doing partial unpoisoning
2024-08-13 12:12:13 +02:00
backing-dev.c
blk-wbt: Fix detection of dirty-throttled tasks
2024-02-06 09:44:03 -07:00
balloon_compaction.c
…
bootmem_info.c
…
cma_debug.c
…
cma_sysfs.c
…
cma.c
mm/cma: drop incorrect alignment check in cma_init_reserved_mem
2024-08-13 12:12:13 +02:00
cma.h
…
compaction.c
mm/compaction: fix UBSAN shift-out-of-bounds warning
2025-06-15 10:39:36 +03:00
debug_page_alloc.c
mm, treewide: rename MAX_ORDER to MAX_PAGE_ORDER
2024-01-08 15:27:15 -08:00
debug_page_ref.c
…
debug_vm_pgtable.c
mm/debug_vm_pgtable: drop RANDOM_ORVALUE trick
2024-11-09 18:45:06 +03:00
debug.c
…
dmapool_test.c
…
dmapool.c
…
early_ioremap.c
…
fadvise.c
…
fail_page_alloc.c
…
failslab.c
…
filemap.c
cachestat: fix page cache statistics permission checking
2025-05-19 12:48:17 +02:00
folio-compat.c
mm: remove page_add_new_anon_rmap and lru_cache_add_inactive_or_unevictable
2023-12-29 11:58:27 -08:00
gup_test.c
…
gup_test.h
…
gup.c
mm: gup: stop abusing try_grab_folio
2024-11-09 18:45:05 +03:00
highmem.c
x86/kexec: use pr_err() instead of kexec_dprintk() when an error occurs
2023-12-29 12:22:28 -08:00
hmm.c
…
huge_memory.c
mm/thp: fix deferred split unqueue naming and locking
2025-03-14 14:30:32 +01:00
hugetlb_cgroup.c
…
hugetlb_vmemmap.c
mm: hugetlb_vmemmap: move mmap lock to vmemmap_remap_range()
2023-12-12 10:57:08 -08:00
hugetlb_vmemmap.h
…
hugetlb.c
mm/hugetlb: fix avoid_reserve to allow taking folio from subpool
2025-06-15 10:39:31 +03:00
hwpoison-inject.c
…
init-mm.c
…
internal.h
Rename .data.once to .data..once to fix resetting WARN*_ONCE
2025-03-14 14:31:15 +01:00
interval_tree.c
…
io-mapping.c
…
ioremap.c
…
Kconfig
mm: z3fold: deprecate CONFIG_Z3FOLD
2025-01-17 14:44:45 +03:00
Kconfig.debug
…
khugepaged.c
mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace point
2025-03-14 14:29:57 +01:00
kmemleak.c
mm: kmemleak: fix upper boundary check for physical address objects
2025-06-15 10:39:36 +03:00
ksm.c
mm/ksm: fix ksm_zero_pages accounting
2024-08-13 12:12:13 +02:00
list_lru.c
mm: list_lru: fix UAF for memory cgroup
2024-11-09 18:45:04 +03:00
maccess.c
…
madvise.c
mm: convert folio_estimated_sharers() to folio_likely_mapped_shared()
2024-09-27 11:41:32 +02:00
Makefile
kbuild: make -Woverride-init warnings more consistent
2024-06-07 14:48:19 +02:00
mapping_dirty_helpers.c
…
memblock.c
memblock: use numa_valid_node() helper to check for invalid node ID
2025-04-15 19:59:30 +03:00
memcontrol.c
mm/thp: fix deferred split unqueue naming and locking
2025-03-14 14:30:32 +01:00
memfd.c
mm: reinstate ability to map write-sealed memfd mappings read-only
2025-04-15 19:59:27 +03:00
memory_hotplug.c
x86/kaslr: Expose and use the end of the physical memory address space
2024-11-09 18:45:43 +03:00
memory-failure.c
mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu
2024-11-09 18:45:10 +03:00
memory-tiers.c
base/node / acpi: Change 'node_hmem_attrs' to 'access_coordinates'
2023-12-22 14:23:13 -08:00
memory.c
mm: don't install PMD mappings when THPs are disabled by the hw/process/vma
2025-03-14 14:30:15 +01:00
mempolicy.c
mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
2025-03-14 14:31:50 +01:00
mempool.c
Merge tag 'mm-stable-2024-01-08-15-31' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2024-01-09 11:18:47 -08:00
memremap.c
mm: remove stale example from comment
2023-12-29 11:58:26 -08:00
memtest.c
memtest: use {READ,WRITE}_ONCE in memory scanning
2024-05-01 15:55:23 +02:00
migrate_device.c
mm: convert page_try_share_anon_rmap() to folio_try_share_anon_rmap_[pte|pmd]()
2023-12-29 11:58:56 -08:00
migrate.c
mm/thp: fix deferred split unqueue naming and locking
2025-03-14 14:30:32 +01:00
mincore.c
…
mlock.c
mm/mlock: set the correct prev on failure
2025-03-14 14:30:28 +01:00
mm_init.c
efi: disable mirror feature during crashkernel
2024-01-12 15:20:47 -08:00
mm_slot.h
…
mmap_lock.c
mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
2024-11-09 18:40:02 +03:00
mmap.c
mm: reinstate ability to map write-sealed memfd mappings read-only
2025-04-15 19:59:27 +03:00
mmu_gather.c
mm/memory: page_remove_rmap() -> folio_remove_rmap_pte()
2023-12-29 11:58:54 -08:00
mmu_notifier.c
…
mmzone.c
…
mprotect.c
mm: refactor map_deny_write_exec()
2025-03-14 14:30:36 +01:00
mremap.c
mm/mremap: fix address wraparound in move_page_tables()
2025-03-14 14:30:37 +01:00
msync.c
…
nommu.c
mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling
2025-03-14 14:30:36 +01:00
oom_kill.c
…
page_alloc.c
mm: page_alloc: move mlocked flag clearance into free_pages_prepare()
2025-03-14 14:30:38 +01:00
page_counter.c
…
page_ext.c
…
page_idle.c
…
page_io.c
zswap: memcontrol: implement zswap writeback disabling
2023-12-29 20:22:11 -08:00
page_isolation.c
mm, treewide: rename MAX_ORDER to MAX_PAGE_ORDER
2024-01-08 15:27:15 -08:00
page_owner.c
mm, treewide: rename MAX_ORDER to MAX_PAGE_ORDER
2024-01-08 15:27:15 -08:00
page_poison.c
…
page_reporting.c
mm, treewide: rename MAX_ORDER to MAX_PAGE_ORDER
2024-01-08 15:27:15 -08:00
page_reporting.h
…
page_table_check.c
mm/page_table_check: support userfault wr-protect entries
2024-11-09 18:45:06 +03:00
page_vma_mapped.c
mm: thp: introduce multi-size THP sysfs interface
2023-12-20 14:48:12 -08:00
page-writeback.c
Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
2024-09-27 11:14:40 +02:00
pagewalk.c
…
percpu-internal.h
…
percpu-km.c
…
percpu-stats.c
…
percpu-vm.c
…
percpu.c
mm: Introduce flush_cache_vmap_early()
2023-12-14 00:23:17 -08:00
pgalloc-track.h
…
pgtable-generic.c
mm: fix race between __split_huge_pmd_locked() and GUP-fast
2024-08-13 12:12:12 +02:00
process_vm_access.c
…
ptdump.c
…
readahead.c
mm/readahead: fix large folio support in async readahead
2025-04-15 19:59:20 +03:00
rmap.c
mm: multi-gen LRU: use {ptep,pmdp}_clear_young_notify()
2025-03-14 14:30:18 +01:00
rodata_test.c
…
secretmem.c
secretmem: disable memfd_secret() if arch cannot set direct map
2025-02-14 15:50:40 +03:00
shmem_quota.c
tmpfs: fix race on handling dquot rbtree
2024-05-01 15:55:31 +02:00
shmem.c
Revert "libfs: Add simple_offset_empty()"
2025-05-19 12:48:18 +02:00
show_mem.c
mm, treewide: introduce NR_PAGE_ORDERS
2024-01-08 15:27:15 -08:00
shrinker_debug.c
…
shrinker.c
mm: shrinker: avoid memleak in alloc_shrinker_info
2025-03-14 14:30:16 +01:00
shuffle.c
…
shuffle.h
mm, treewide: rename MAX_ORDER to MAX_PAGE_ORDER
2024-01-08 15:27:15 -08:00
slab_common.c
mm: krealloc: Fix MTE false alarm in __do_krealloc
2025-01-17 14:44:39 +03:00
slab.h
mm/slub: Avoid list corruption when removing a slab from the full list
2025-03-14 14:31:18 +01:00
slub.c
mm/slub: Avoid list corruption when removing a slab from the full list
2025-03-14 14:31:18 +01:00
sparse-vmemmap.c
…
sparse.c
x86/kaslr: Expose and use the end of the physical memory address space
2024-11-09 18:45:43 +03:00
swap_cgroup.c
…
swap_slots.c
…
swap_state.c
mm/swap_state: update zswap LRU's protection range with the folio locked
2024-02-20 14:20:48 -08:00
swap.c
mm: page_alloc: move mlocked flag clearance into free_pages_prepare()
2025-03-14 14:30:38 +01:00
swap.h
mm/swap: fix race when skipping swapcache
2024-02-20 14:20:48 -08:00
swapfile.c
mm/swapfile: skip HugeTLB pages for unuse_vma
2025-02-14 15:50:46 +03:00
truncate.c
mm: Fix missing folio invalidation calls during truncation
2024-11-09 18:45:26 +03:00
usercopy.c
…
userfaultfd.c
userfaultfd: fix checks for huge PMDs
2024-11-09 18:45:44 +03:00
util.c
mm: only enforce minimum stack gap size if it's sensible
2025-01-17 14:43:47 +03:00
vmalloc.c
vmalloc: fix accounting with i915
2025-04-15 19:58:44 +03:00
vmpressure.c
…
vmscan.c
mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()
2025-04-15 19:59:21 +03:00
vmstat.c
vmstat: call fold_vm_zone_numa_events() before show per zone NUMA event
2025-03-14 14:31:17 +01:00
workingset.c
cachestat: do not flush stats in recency check
2024-09-27 11:14:52 +02:00
z3fold.c
…
zbud.c
…
zpool.c
…
zsmalloc.c
mm: zsmalloc: return -ENOSPC rather than -EINVAL in zs_malloc while size is too large
2024-01-05 10:17:47 -08:00
zswap.c
mm: zswap: rename is_zswap_enabled() to zswap_is_enabled()
2024-11-09 18:46:00 +03:00