From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id AD920C77B7A for ; Sat, 20 May 2023 12:35:42 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S229852AbjETMfl (ORCPT ); Sat, 20 May 2023 08:35:41 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:59404 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229563AbjETMfk (ORCPT ); Sat, 20 May 2023 08:35:40 -0400 Received: from mail-pf1-x436.google.com (mail-pf1-x436.google.com [IPv6:2607:f8b0:4864:20::436]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 98798118 for ; Sat, 20 May 2023 05:35:39 -0700 (PDT) Received: by mail-pf1-x436.google.com with SMTP id d2e1a72fcca58-64d1e96c082so2025510b3a.1 for ; Sat, 20 May 2023 05:35:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20221208; t=1684586139; x=1687178139; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:from:to:cc:subject:date:message-id:reply-to; bh=Qi1BxeyXyBr0dFvjh80CQh5A+2m5jDZBC0Bu7zhHxEw=; b=QL/LdjHbI4m+gVCU+VvtvjX0NJ8mVhPe62iN8KT39wNVWlaM60Jxr2acJQK0RZkR0d nDT/0BYx2tyRGhkwA6WezQrmA76bxlTaLdmhPIpjZ2pDPg7FK44taZnStGq4tSdwrFIs fNarjRaZNC7cW140Z5nwBlcy+/Gz42AV6nYRot7ChkpRrjbwIl5ulku0KwU48qDXg5Zk 7i5GDuSIkgV3Ve74itYUUonXj6phUzztKVazUERNLluyPmnVnqqb63iUXiLi6Y4q8yJn YYsBTHbdSTkTXN8z0p2T9NAY1pYxBqhEb7HZqxbHJuVoEgKFZVOiFtqdBQpxR7KivWg5 mtzQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1684586139; x=1687178139; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=Qi1BxeyXyBr0dFvjh80CQh5A+2m5jDZBC0Bu7zhHxEw=; b=YQDqcU0bOzmXwWTssv262XuQsWeRQ7JKHVIVzdSFw4pDFALLG0kNc0zHedY3PtgZ7y s4P2FN9tqwRbHQxsOUhOpKZm7ZzB3eb9uI5tb/JXkJLJJKC5GtjFRB4wyFp5AQMFAyYV OGNPHwkWDTac8prBbL/twqBETgx4w5ZVBIVgGRJ7WEzt6jDYO1G5I6+mnNuob8LvOTft DXkEDAutN7zlIOhtzuW8POVSzf9Tg9b1X4Lo1D3VgOz/ZH+0MCMDYe3shC14gcuJdfEh +BRaFH7Q10ADxk4boGkuQgt7hsB33T6osM4dUx/TG8xBic1cp7Nj8/BgEoHt1SJtkclH 45pg== X-Gm-Message-State: AC+VfDwPS1IJZO718yQvVpS416IeYFElDn+P7FFEhmTHAte1NOaBlK7r 56ScwdM+T2g0Pe8FxfHHWOPU0A== X-Google-Smtp-Source: ACHHUZ7CzT1d8/QJg8ZlDIs8IMGzYxs0CAE5xM0ac4MEmXuxLlO65D0vgJA2pzrvzzXyJYhzORTc/Q== X-Received: by 2002:a05:6a00:891:b0:63b:8afe:a4dc with SMTP id q17-20020a056a00089100b0063b8afea4dcmr6625617pfj.30.1684586138790; Sat, 20 May 2023 05:35:38 -0700 (PDT) Received: from google.com (157.214.185.35.bc.googleusercontent.com. [35.185.214.157]) by smtp.gmail.com with ESMTPSA id r25-20020a62e419000000b0062d859a33d1sm1194351pfh.84.2023.05.20.05.35.37 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 20 May 2023 05:35:38 -0700 (PDT) Date: Sat, 20 May 2023 12:35:34 +0000 From: Carlos Llamas To: Greg Kroah-Hartman Cc: Arve =?iso-8859-1?B?SGr4bm5lduVn?= , Todd Kjos , Martijn Coenen , Joel Fernandes , Christian Brauner , Suren Baghdasaryan , "Kirill A. Shutemov" , Michal Hocko , Vlastimil Babka , Matthew Wilcox , Andrew Morton , linux-kernel@vger.kernel.org, kernel-team@android.com, Jann Horn , stable@vger.kernel.org, Minchan Kim , Yang Shi , Liam Howlett , Todd Kjos Subject: Re: [PATCH] binder: fix UAF of alloc->vma in race with munmap() Message-ID: References: <20230519195950.1775656-1-cmllamas@google.com> <2023052048-sloping-credible-8871@gregkh> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <2023052048-sloping-credible-8871@gregkh> Precedence: bulk List-ID: X-Mailing-List: stable@vger.kernel.org On Sat, May 20, 2023 at 10:54:15AM +0100, Greg Kroah-Hartman wrote: > On Fri, May 19, 2023 at 07:59:49PM +0000, Carlos Llamas wrote: > > [ cmllamas: clean forward port from commit 015ac18be7de ("binder: fix > > UAF of alloc->vma in race with munmap()") in 5.10 stable. It is needed > > in mainline after the revert of commit a43cfc87caaf ("android: binder: > > stop saving a pointer to the VMA") as pointed out by Liam. The commit > > log and tags have been tweaked to reflect this. ] > > I'm confused, is this for a stable release (and if so, which one), or is > this for Linus's tree? Sorry for the confusion. This is for Linus's tree.