Linux Kernel Memory Corruption Vulnerability in HugeTLB Handling

A vulnerability in the Linux kernel's handling of huge pages can lead to memory corruption or information leaks. The issue arises in the hugetlb_no_page() function, which calls folio_zero_user() with a fault address that may not be properly aligned with the huge page size. This misalignment can cause clear_gigantic_page() to receive an address that violates its alignment requirements. The vulnerability has been addressed by ensuring that the fault address is aligned with the huge page size and by renaming the address parameter for clarity.

Impact

The vulnerability can cause memory corruption or information leaks.