Description
In the Linux kernel, the following vulnerability has been resolved: fs: afs: revert mmap_prepare() change Partially reverts commit 9d5403b1036c ("fs: convert most other generic_file_*mmap() users to .mmap_prepare()"). This is because the .mmap invocation establishes a refcount, but .mmap_prepare is called at a point where a merge or an allocation failure might happen after the call, which would leak the refcount increment. Functionality is being added to permit the use of .mmap_prepare in this case, but in the interim, we need to fix this.
Product status
9d5403b1036cdcd4be0f9f5568612c0e60e73d79 (git) before f51f85c044809fbd39ac8ae07ac99bc43ce32bd5
9d5403b1036cdcd4be0f9f5568612c0e60e73d79 (git) before 48c7a0eaeea41da17d1d84d2d7a4c40be122b246
9d5403b1036cdcd4be0f9f5568612c0e60e73d79 (git) before fbfc6578eaca12daa0c09df1e9ba7f2c657b49da
6.17
Any version before 6.17
6.18.27 (semver)
7.0.4 (semver)
7.1-rc1 (original_commit_for_fix)
References
git.kernel.org/...c/f51f85c044809fbd39ac8ae07ac99bc43ce32bd5
git.kernel.org/...c/48c7a0eaeea41da17d1d84d2d7a4c40be122b246
git.kernel.org/...c/fbfc6578eaca12daa0c09df1e9ba7f2c657b49da