Memory Corruption and Information Leak in Linux Kernel by Vendor

CVE-2024-52319

What is CVE-2024-52319?

A vulnerability in the Linux kernel can lead to memory corruption or information leaks due to the handling of unaligned fault addresses within the hugetlb_no_page() function. When the fault address does not align correctly with the required huge page size, it can adversely affect system stability. The issue arises in the clear_gigantic_page() function, which requires proper alignment. This situation poses significant risks to system integrity and confidentiality, necessitating immediate attention and remediation.

References