Commit 44f9a00a authored by Linus Torvalds's avatar Linus Torvalds
Browse files
Pull slab fix from Vlastimil Babka:

 - A stable fix for a missing tag reset that can happen in
   kfree_nolock() with KASAN+SLUB_TINY configs (Deepanshu Kartikey)

* tag 'slab-for-6.19-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/vbabka/slab:
  mm/slub: reset KASAN tag in defer_free() before accessing freed memory
parents e4a3d52a 53ca00a1
Loading
Loading
Loading
Loading
+2 −0
Original line number Diff line number Diff line
@@ -6539,6 +6539,8 @@ static void defer_free(struct kmem_cache *s, void *head)

	guard(preempt)();

	head = kasan_reset_tag(head);

	df = this_cpu_ptr(&defer_free_objects);
	if (llist_add(head + s->offset, &df->objects))
		irq_work_queue(&df->work);