Linux kernel bug fix: mm/gup: fix try_grab_compound_head() race with split_huge_page()
Subsystem: memory (mm/gup.c)
Bug type: use-after-free, severity: high
Keywords: refcount;use after free
Files changed: mm/gup.c
Introduced by Kirill A. Shutemov on 2016-01-15 17:56:32 -0800; fixed by Jann Horn on 2021-06-29 10:53:45 -0700 (lifetime: 1991 days)