CVE-2024-53148

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> comedi: Flush partial mappings in error case<br /> <br /> If some remap_pfn_range() calls succeeded before one failed, we still have<br /> buffer pages mapped into the userspace page tables when we drop the buffer<br /> reference with comedi_buf_map_put(bm). The userspace mappings are only<br /> cleaned up later in the mmap error path.<br /> <br /> Fix it by explicitly flushing all mappings in our VMA on the error path.<br /> <br /> See commit 79a61cc3fc04 ("mm: avoid leaving partial pfn mappings around in<br /> error case").