Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1758727AbbGHKyO (ORCPT ); Wed, 8 Jul 2015 06:54:14 -0400 Received: from ozlabs.org ([103.22.144.67]:39437 "EHLO ozlabs.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1758184AbbGHKyK (ORCPT ); Wed, 8 Jul 2015 06:54:10 -0400 X-powerpc-patch-notification: thanks X-powerpc-patch-commit: 10a5894f2dedd8a26b3132497445b314c0d952c4 In-Reply-To: <1436247946-16292-1-git-send-email-imunsie@au.ibm.com> To: Ian Munsie From: Michael Ellerman Cc: mikey , Matt Ochs , linux-kernel , stable@vger.kernel.org, linuxppc-dev , Ian Munsie Subject: Re: [1/2] cxl: Fix off by one error allowing subsequent mmap page to be accessed Message-Id: <20150708105407.D6556140788@ozlabs.org> Date: Wed, 8 Jul 2015 20:54:07 +1000 (AEST) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1077 Lines: 25 On Tue, 2015-07-07 at 05:45:45 UTC, Ian Munsie wrote: > From: Ian Munsie > > It was discovered that if a process mmaped their problem state area they > were able to access one page more than expected, potentially allowing > them to access the problem state area of an unrelated process. > > This was due to a simple off by one error in the mmap fault handler > introduced in 0712dc7e73e59d79bcead5d5520acf4e9e917e87 ("cxl: Fix issues > when unmapping contexts"), which is fixed in this patch. > > Cc: stable@vger.kernel.org > Fixes: 0712dc7e73e5 ("cxl: Fix issues when unmapping contexts") > Signed-off-by: Ian Munsie Applied to powerpc fixes, thanks. https://git.kernel.org/cgit/linux/kernel/git/powerpc/linux.git/commit/?h=fixes&id=10a5894f2dedd8a26b3132497445b314c0d952c4 cheers -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/