CVE-2024-52319

In the Linux kernel, the following vulnerability has been resolved:

mm: use aligned address in clear_gigantic_page()

In current kernel, hugetlb_no_page() calls folio_zero_user() with the fault address. Where the fault address may be not aligned with the huge page size. Then, folio_zero_user() may call clear_gigantic_page() with the address, while clear_gigantic_page() requires the address to be huge page size aligned. So, this may cause memory corruption or information leak, addtional, use more obvious naming 'addr_hint' instead of 'addr' for clear_gigantic_page().

This vulnerability is rated as Moderate impact because exploitation requires local access to allocate and fault gigantic hugetlb mappings, limiting the threat scope to localized memory corruption, denial of service, or data disclosure without enabling remote compromise. Red Hat enterprise installations do not enable gigantic pages by default, as they require explicit administrative reservation during boot or runtime. Consequently, systems operating with default memory configurations or without active gigantic hugetlb pools remain unaffected by this issue.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.