Re: [PATCH] binder: fix UAF of alloc->vma in race with munmap()

From: Carlos Llamas
Date: Sat May 20 2023 - 08:35:46 EST


On Sat, May 20, 2023 at 10:54:15AM +0100, Greg Kroah-Hartman wrote:
> On Fri, May 19, 2023 at 07:59:49PM +0000, Carlos Llamas wrote:
> > [ cmllamas: clean forward port from commit 015ac18be7de ("binder: fix
> > UAF of alloc->vma in race with munmap()") in 5.10 stable. It is needed
> > in mainline after the revert of commit a43cfc87caaf ("android: binder:
> > stop saving a pointer to the VMA") as pointed out by Liam. The commit
> > log and tags have been tweaked to reflect this. ]
>
> I'm confused, is this for a stable release (and if so, which one), or is
> this for Linus's tree?

Sorry for the confusion. This is for Linus's tree.