CVE Request -- kernel: huge pages: memory leak on mmap failure

[Petr Matousek <pmatouse () redhat com>]

Description of problem:
When called for anonymous (non-shared) mappings, hugetlb_reserve_pages()
does a resv_map_alloc(). It depends on code in hugetlbfs's
vm_ops->close() to release that allocation.

However, in the mmap() failure path, we do a plain unmap_region()
without the remove_vma() which actually calls vm_ops->close(). 

An unprivileged local user could use this flaw to crash the system.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=824345
http://www.spinics.net/lists/linux-mm/msg34763.html

Proposed upstream fix:
https://lkml.org/lkml/2012/5/21/385

Thanks,
-- 
Petr Matousek / Red Hat Security Response Team