v2
2026-07-17
virtio_balloon 冻结时 UAF 修复 · v2
修复virtio_balloon冻结时UAF,迁移Free Page Reporting到freezable工作队列并添加暂停标志。
原始补丁链接
子 Patch(2)
1/2
mm/page_reporting: use system_freezable_wq to fix UAF during suspend
During PM freeze (e.g. S3 suspend or S4 hibernation), device drivers like virtio_balloon reset their underlying virtio devices and delete their virtqueues via vdev->config->del_vqs(). However, page r
2/2
virtio_balloon: avoid shrinker execution during PM suspend
[virtio_balloon: avoid shrinker execution during PM suspend] During PM freeze (e.g. S4 hibernation), virtballoon_freeze() calls remove_common() which resets the virtio device and deletes all virtqueue