Linux kernel bug fix: mm: fix a UAF when vma->mm is freed after vma->vm_refcnt got dropped
Subsystem: memory (mm/mmap_lock.c)
Bug type: use-after-free, severity: unknown
Keywords: refcount;UAF
Files changed: include/linux/mmap_lock.h;mm/mmap_lock.c
Introduced by Suren Baghdasaryan on 2025-03-16 22:06:21 -0700; fixed by Suren Baghdasaryan on 2025-08-02 12:06:11 -0700 (lifetime: 138 days)