CVE-2024-51729

In the Linux kernel, the following vulnerability has been resolved:

mm: use aligned address in copy_user_gigantic_page()

In current kernel, hugetlb_wp() calls copy_user_large_folio() with the fault address. Where the fault address may be not aligned with the huge page size. Then, copy_user_large_folio() may call copy_user_gigantic_page() with the address, while copy_user_gigantic_page() requires the address to be huge page size aligned. So, this may cause memory corruption or information leak, addtional, use more obvious naming 'addr_hint' instead of 'addr' for copy_user_gigantic_page().

This vulnerability is rated Moderate rather than Important because exploitation requires local authenticated access with specific privileges to trigger copy-on-write operations on gigantic huge pages, limiting the blast radius. Supported Red Hat Enterprise Linux releases and container environments are not affected, as the vulnerable hugetlb folio handling logic was introduced in upstream kernel version 6.11 and is not present in supported Red Hat kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.