On Fri, 17 Jul 2026 15:02:51 +0800 Hongfu Li <[email protected]> wrote:

> From: Hongfu Li <[email protected]>
> 
> In mremap_dontunmap_partial_mapping_overwrite(), mremap() stores its
> returned remapped address into remapped_mapping, while the BUG_ON
> incorrectly checks dest_mapping instead.
> 
> If mremap() fails, dest_mapping still holds a valid pointer obtained from
> the prior mmap() call, making this BUG_ON never trigger at all. Correct
> the check to validate the actual mremap() return value stored in
> remapped_mapping.

Nice catch.

> 
> Signed-off-by: Hongfu Li <[email protected]>

Reviewed-by: SJ Park <[email protected]>


Thanks,
SJ

[...]

Reply via email to