CVE-2024-44947 is a medium-severity information leak vulnerability in the Linux kernel's FUSE subsystem. The flaw occurs because fuse_notify_store() does not fully initialize page contents beyond the end-of-file before marking pages as uptodate. This can expose uninitialized memory contents to userspace via mmap() on systems that do not enable init-on-alloc. The vulnerability does not affect systems with CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y or the equivalent kernel parameter enabled.