This bug is missing log files that will aid in diagnosing the problem.
While running an Ubuntu kernel (not a mainline or third-party kernel)
please enter the following command in a terminal window:

apport-collect 1947709

and then change the status of the bug to 'Confirmed'.

If, due to the nature of the issue you have encountered, you are unable
to run this command, please add a comment stating that fact and change
the bug status to 'Confirmed'.

This change has been made by an automated script, maintained by the
Ubuntu Kernel Team.

** Changed in: linux (Ubuntu)
       Status: New => Incomplete

** Changed in: linux (Ubuntu Focal)
       Status: New => Incomplete

** Changed in: linux (Ubuntu Hirsute)
       Status: New => Incomplete

** Changed in: linux (Ubuntu Impish)
       Status: New => Incomplete

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1947709

Title:
  Drop "UBUNTU: SAUCE: cachefiles: Page leaking in
  cachefiles_read_backing_file while vmscan is active"

Status in linux package in Ubuntu:
  Incomplete
Status in linux source package in Focal:
  Incomplete
Status in linux source package in Hirsute:
  Incomplete
Status in linux source package in Impish:
  Incomplete
Status in linux source package in Jammy:
  Incomplete

Bug description:
  [Impact]

  "UBUNTU: SAUCE: cachefiles: Page leaking in
  cachefiles_read_backing_file while vmscan is active" has been applied
  to fix a page leaking issue.

  However a slightly different fix has been applied upstream:

  9a24ce5b66f9c8190d63b15f4473600db4935f1f cachefiles: Fix page leak in
  cachefiles_read_backing_file while vmscan is active

  Basically we are fixing the same issue in two different ways at the
  same time, but even worse our patch an introduce a potential NULL
  pointer dereference: we do a put_page(newpage) and set newpage = NULL
  in the main for() loop and then we may do additional put_page(newpage)
  after the main for loop if ret == -EEXIST, that would trigger the NULL
  pointer dereference.

  [Test case]

  No test case or reproducer is available at the moment, this issue has
  been found simply by reviewing the code.

  [Fix]

  Drop the SAUCE patch and rely on the upstream fix.

  [Regression potential]

  If the analysis is not correct we may re-introduce a page leak in
  cachefiles (NFS for example), but it seems unlikely to happen, since the 
upstream fix is addressing the page leaking already.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1947709/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to