Linux Kernel Daily: Critical Security and Memory Management Fixes

Transcript

Good morning, I'm your host with Linux Kernel Daily for February 3rd, 2026.

Today's activity centers on critical bug fixes as the kernel approaches the 6.19 release. Linus Torvalds pulled in two major fix sets addressing security and memory management regressions.

The first merge resolves a security subsystem regression where the /proc/sys/vm/mmap_min_addr tunable disappeared when CONFIG_SECURITY was disabled. This fix preserves the memory mapping address control regardless of security configuration, with plans to eventually migrate core functionality to the memory management subsystem.

The second merge addresses three serious vulnerabilities in the dmem cgroup controller. Chen Ridong's fixes tackle a use-after-free condition, an RCU warning during region unregistration, and a NULL pointer dereference when setting memory limits. The use-after-free issue was particularly severe, occurring when pools remained referenced after their associated memory regions were unregistered. The solution implements reference counting to ensure pools are only freed when no longer in use.

The RCU warning fix replaces inappropriate RCU list traversal with spinlock-protected safe iteration. The NULL pointer fix adds validation when parsing region names during memory limit configuration.

All dmem controller fixes are tagged for stable backport to version 6.14 and later, indicating these are fundamental issues affecting production systems.

What's next: Watch for additional release candidate fixes as version 6.19 approaches final release. The security subsystem collaboration with memory management teams may produce architectural changes in future versions.

That's your Linux Kernel Daily briefing. I'm your host, we'll return tomorrow.