Re: [PATCH 03/10] mm/hugetlb: fix use-after-free in hugetlb_mfill_atomic_pte()

[Muchun Song]

> On Oct 16, 2026, at 00:07, David Hildenbrand (Arm) <david@xxxxxxxxxx> wrote:
> 
> Let's fix another instance where we use a folio after dropping the PTL,
> where someone else could e.g., MADV_DONTNEED it once we drop the PTL,
> making us trigger a use-after-free on the folio.
> 
> Fixes: cb6acd01e2e4 ("hugetlbfs: fix races and page leaks during migration")
> Fixes: 1c9e8def43a3 ("userfaultfd: hugetlbfs: add UFFDIO_COPY support for shared mappings")
> Cc: stable@xxxxxxxxxxxxxxx
> Reported-by: Lorenzo Stoakes (ARM) <ljs@xxxxxxxxxx>
> Reviewed-by: Lorenzo Stoakes (ARM) <ljs@xxxxxxxxxx>
> Signed-off-by: David Hildenbrand (Arm) <david@xxxxxxxxxx>

Acked-by: Muchun Song <muchun.song@xxxxxxxxx>

Thanks.