--- a/mm/kfence/core.c~kfence-zero-guard-page-after-out-of-bounds-access +++ a/mm/kfence/core.c @@ -372,6 +372,7 @@ static void kfence_guarded_free(void *ad /* Restore page protection if there was an OOB access. */ if (meta->unprotected_page) { + memzero_explicit((void *)ALIGN_DOWN(meta->unprotected_page, PAGE_SIZE), PAGE_SIZE); kfence_protect(meta->unprotected_page); meta->unprotected_page = 0; }