From: Thomas Gleixner <tglx@kernel.org>
To: Wu Frank <yifanwucs@gmail.com>, Sasha Levin <sashal@kernel.org>
Cc: stable@vger.kernel.org, Keenan Dong <keenanat2000@gmail.com>,
Yuan Tan <yuantan098@gmail.com>,
Juefei Pu <tomapufckgml@gmail.com>, Xin Liu <bird@lzu.edu.cn>,
Sid Kumar <sidkumar1@gmail.com>
Subject: Re: [PATCH 5.15.y] rtmutex: Use waiter::task instead of current in remove_waiter()
Date: Thu, 09 Jul 2026 08:53:07 +0200 [thread overview]
Message-ID: <87fr1sr6wc.ffs@fw13> (raw)
In-Reply-To: <CAPw-QwdiQnbxiwrivx8HthquyQef4herojq15ozy2JgWa8sAAA@mail.gmail.com>
On Wed, Jul 08 2026 at 18:53, Wu Frank wrote:
> On Wed, Jul 8, 2026 at 6:04 PM Sasha Levin <sashal@kernel.org> wrote:
>> Could you resend this as a two-patch series: this patch plus a 5.15.y
>> adaptation of 40a25d59e85b3c? Also worth considering as a third patch is
>> 74e144274af399 ("futex/requeue: Prevent NULL pointer dereference in
>> remove_waiter() on self-deadlock").
>
> For completeness, we also reviewed the related patches yesterday.
>
> Our understanding is that the correct backport set is this patch plus
> 40a25d59e85b3c. This patch fixes the original issue, while
> 40a25d59e85b3c fixes the NULL-pointer dereference. We also noticed
> that 40a25d59e85b3c appears to cover a separate
> use-before-initialization case, although that case is not relevant to
> this backport.
>
> I do not think 74e144274af399 should be included. It was later
> reverted by 39def6d250d3, and the revert changelog says that the issue
> was already handled by 40a25d59e85b3c. It also notes that
> 74e144274af399 introduced new problems.
Only 40a25d59e85b3c needs to be backported. 74e144274af399 is not
required and buggy and got reverted upstream.
Thanks,
tglx
prev parent reply other threads:[~2026-07-09 6:53 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-05-04 8:58 FAILED: patch "[PATCH] rtmutex: Use waiter::task instead of current in" failed to apply to 5.15-stable tree gregkh
2026-07-08 15:05 ` [PATCH 5.15.y] rtmutex: Use waiter::task instead of current in remove_waiter() Sid Kumar
2026-07-09 1:04 ` Sasha Levin
2026-07-09 1:53 ` Wu Frank
2026-07-09 6:53 ` Thomas Gleixner [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=87fr1sr6wc.ffs@fw13 \
--to=tglx@kernel.org \
--cc=bird@lzu.edu.cn \
--cc=keenanat2000@gmail.com \
--cc=sashal@kernel.org \
--cc=sidkumar1@gmail.com \
--cc=stable@vger.kernel.org \
--cc=tomapufckgml@gmail.com \
--cc=yifanwucs@gmail.com \
--cc=yuantan098@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox