)]}'
{
  "commit": "f7149027e393d12f0cd1209b37b45c360be1bd7c",
  "tree": "a7d6c202c77a99a7fc870dc9f7e9a3bb92ba0bae",
  "parents": [
    "4066d904e8a8771606cc893852eabfca7a729a22"
  ],
  "author": {
    "name": "Liam R. Howlett",
    "email": "Liam.Howlett@oracle.com",
    "time": "Mon Apr 22 16:33:49 2024 -0400"
  },
  "committer": {
    "name": "Shuo Yang",
    "email": "gshuoy@google.com",
    "time": "Thu Jul 18 18:33:51 2024 +0000"
  },
  "message": "maple_tree: fix mas_empty_area_rev() null pointer dereference\n\ncommit 955a923d2809803980ff574270f81510112be9cf upstream.\n\nCurrently the code calls mas_start() followed by mas_data_end() if the\nmaple state is MA_START, but mas_start() may return with the maple state\nnode \u003d\u003d NULL.  This will lead to a null pointer dereference when checking\ninformation in the NULL node, which is done in mas_data_end().\n\nAvoid setting the offset if there is no node by waiting until after the\nmaple state is checked for an empty or single entry state.\n\nA user could trigger the events to cause a kernel oops by unmapping all\nvmas to produce an empty maple tree, then mapping a vma that would cause\nthe scenario described above.\n\nBUG\u003db/346513880\nTEST\u003dpresubmit\nRELEASE_NOTE\u003dFixes CVE-2024-36891 in the Linux kernel\n\ncos-patch: security-moderate\nLink: https://lkml.kernel.org/r/20240422203349.2418465-1-Liam.Howlett@oracle.com\nFixes: 54a611b60590 (\"Maple Tree: add new data structure\")\nChange-Id: Iff690347a9951b1ec156fb988c806bc05d03a6de\nSigned-off-by: Liam R. Howlett \u003cLiam.Howlett@oracle.com\u003e\nReported-by: Marius Fleischer \u003cfleischermarius@gmail.com\u003e\nCloses: https://lore.kernel.org/lkml/CAJg\u003d8jyuSxDL6XvqEXY_66M20psRK2J53oBTP+fjV5xpW2-R6w@mail.gmail.com/\nLink: https://lore.kernel.org/lkml/CAJg\u003d8jyuSxDL6XvqEXY_66M20psRK2J53oBTP+fjV5xpW2-R6w@mail.gmail.com/\nTested-by: Marius Fleischer \u003cfleischermarius@gmail.com\u003e\nTested-by: Sidhartha Kumar \u003csidhartha.kumar@oracle.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nSigned-off-by: Shuo Yang \u003cgshuoy@google.com\u003e\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/76600\nReviewed-by: Oleksandr Tymoshenko \u003covt@google.com\u003e\nTested-by: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "06a97816e9ce44b5983eea8fc8cca855f5f21654",
      "old_mode": 33188,
      "old_path": "lib/maple_tree.c",
      "new_id": "9a5bdf1e8e92a0b2666e2ada4babbfd575bd91d6",
      "new_mode": 33188,
      "new_path": "lib/maple_tree.c"
    }
  ]
}