* Re: [SECURITY] mm: split file arm of unmap_folio() drops RWP PTE state
[not found] <3f250fc2.bbe22.1a1c5441381.Coremail.18670333770@163.com>
@ 2026-11-10 11:51 ` David Hildenbrand (Arm)
0 siblings, 0 replies; only message in thread
From: David Hildenbrand (Arm) @ 2026-11-10 11:51 UTC (permalink / raw)
To: n3rd, linux-mm, linux-kernel
Cc: akpm, ziy, ljs, kas, Mike Rapoport, peterx, security
On 11/10/26 12:42, n3rd wrote:
>
> Hello,
>
> I am reporting a security bug in the Linux kernel.
>
> 1. Affected kernel versions
> Linux v7.3-rc7 (mainline, built and tested as 7.3.0-rc7) is affected and was
> reproduced on two fresh boots. v7.3-rc6 carries the same code and is affected as
> well. v7.2.9 does not have the RWP feature at all, because UFFDIO_RWPROTECT,
> UFFD_FEATURE_RWP and VM_UFFD_RWP were added in v7.3, so it is not affected.
> Triggering additionally requires CONFIG_TRANSPARENT_HUGEPAGE for the PTE mapped
> shmem big folio and CONFIG_USERFAULTFD_RWP. There is no upstream fix as of v7.3-
> rc7 and no CVE has been assigned.
Please don't indicate uffd problems where we lose a pte bit as a security
problem. It's not.
--
Cheers,
David
^ permalink raw reply [flat|nested] only message in thread