[PATCH 2/5] hibernation: ensure secretmem pages don't reach a snapshot
From: Mike Rapoport (Microsoft)
Date: Thu Sep 17 2026 - 02:08:24 EST
hibernation_available() checks for active secretmem users, but a secretmem
file can be created after this check and its pages may get into the
hibernation snapshot although they should not.
Recheck secretmem state after userspace is frozen and abort hibernation if
secretmem is active.
Signed-off-by: Mike Rapoport (Microsoft) <rppt@xxxxxxxxxx>
---
kernel/power/hibernate.c | 5 +++++
1 file changed, 5 insertions(+)
diff --git a/kernel/power/hibernate.c b/kernel/power/hibernate.c
index d2479c69d71a4..281ad49411481 100644
--- a/kernel/power/hibernate.c
+++ b/kernel/power/hibernate.c
@@ -412,6 +412,11 @@ int hibernation_snapshot(int platform_mode)
if (error)
goto Close;
+ if (secretmem_active()) {
+ error = -EBUSY;
+ goto Thaw;
+ }
+
if (hibernation_test(TEST_FREEZER)) {
/*
--
2.53.0