[PATCH 0/3] mm: fix PTE table overruns with folded PMDs

["David Hildenbrand (Arm)" <david@kernel.org>]

Fix 3 pmd_addr_end() abusers that can result in PTE table overruns with
folded PMDs. Let's factor out a helper from a place where we
recently stumbled over something related, and use it to fix these 3
cases.

I'd call these more urgent because they can corrupt memory, although
folded PMDs are uncommon.

I'm planning on picking all 3 up.

Signed-off-by: David Hildenbrand (Arm) <david@kernel.org>
---
David Hildenbrand (Arm) (3):
      mm/userfaultfd: fix PTE table overruns in UFFDIO_MOVE
      mm/rmap: fix PTE table overruns during batched unmap
      mm/rmap: fix PTE table overruns during batched reference checks

 include/linux/pgtable.h | 24 ++++++++++++++++++++++++
 mm/memory.c             |  7 +------
 mm/rmap.c               |  4 ++--
 mm/userfaultfd.c        |  4 ++--
 4 files changed, 29 insertions(+), 10 deletions(-)

---

base-commit: d369ba5a46c65c54b94c94713ca1fb4ad6a87ebf

change-id: 20261111-pte_table_clamped_end-69bbcaf44fe7

--

Cheers,

David