CVE-2024-46852 is a high-severity vulnerability in the Linux kernel's dma-buf CMA heap fault handler. It involves an off-by-one error in the boundary check when handling page faults past the end of a buffer, potentially leading to reading beyond the allocated pages array. This flaw existed until a recent commit introduced VM_DONTEXPAND to prevent mapping larger than the buffer size. The issue allows bypassing overflow checks and could lead to confidentiality, integrity, and availability impacts.