diff --git a/mm/memory.c b/mm/memory.c index 821fcea71a04..ce2ff976fc8d 100644 --- a/mm/memory.c +++ b/mm/memory.c @@ -5284,6 +5284,10 @@ retry: if (!vma_is_anonymous(vma)) goto inval; + /* find_mergeable_anon_vma uses adjacent vmas which are not locked */ + if (!vma->anon_vma) + goto inval; + if (!vma_start_read(vma)) goto inval;