diff options
| author | Linus Torvalds <torvalds@linux-foundation.org> | 2025-12-20 11:24:42 -0800 |
|---|---|---|
| committer | Linus Torvalds <torvalds@linux-foundation.org> | 2025-12-20 11:24:42 -0800 |
| commit | 44f9a00a44a010f3d4611e642d9e5d6adb524170 (patch) | |
| tree | 367d00c4977fbab6b9e52d1cf79692649784b430 | |
| parent | e4a3d52ab97169bba66dd718acf43e559ed5646a (diff) | |
| parent | 53ca00a19d345197a37a1bf552e8d1e7b091666c (diff) | |
Merge tag 'slab-for-6.19-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/vbabka/slab
Pull slab fix from Vlastimil Babka:
- A stable fix for a missing tag reset that can happen in
kfree_nolock() with KASAN+SLUB_TINY configs (Deepanshu Kartikey)
* tag 'slab-for-6.19-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/vbabka/slab:
mm/slub: reset KASAN tag in defer_free() before accessing freed memory
| -rw-r--r-- | mm/slub.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/mm/slub.c b/mm/slub.c index f21b2f0c6f5a..861592ac5425 100644 --- a/mm/slub.c +++ b/mm/slub.c @@ -6539,6 +6539,8 @@ static void defer_free(struct kmem_cache *s, void *head) guard(preempt)(); + head = kasan_reset_tag(head); + df = this_cpu_ptr(&defer_free_objects); if (llist_add(head + s->offset, &df->objects)) irq_work_queue(&df->work); |