Race found in Linux HugeTLB vmemmap optimization path
Dropping RCU around speculative page gets left a window for writes against read-only tail memmap after HVO remap.
By kexecDropping RCU around speculative page gets left a window for writes against read-only tail memmap after HVO remap.
By kexecA missing mm_users hold let concurrent exit free a hugetlb VMA lock under a live page-table walk.
By oops