CVE-2026-68165mm/damon/core: validate ranges in damon_set_regions()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: validate ranges in damon_set_regions() DAMON core logic assumes zero length regions don't exist. However, a few DAMON API callers including DAMON_SYSFS, DAMON_RECLAIM and DAMON_LRU_SORT allow users to set empty monitoring target regions. This could result in WARN_ONCE() on CONFIG_DAMON_DEBUG_SANITY enabled kernel, and divide-by-zero from damon_merge_two_regions(). For example, the WANR_ONCE() can be triggered like below. # grep DAMON_DEBUG_SANITY /boot/config-$(uname -r) # CONFIG_DAMON_DEBUG_SANITY=y # damo start # cd /sys/kernel/mm/damon/admin/kdamonds/0 # echo 0 > contexts/0/targets/0/regions/0/start # echo 0 > contexts/0/targets/0/regions/0/end # echo commit > state # dmesg [....] [ 73.705780] ------------[ cut here ]------------ [ 73.707552] start 0 >= end 0 [ 73.708452] WARNING: mm/damon/core.c:359 at damon_new_region+0x6e/0x80, CPU#1: kdamond.0/758 [...] All DAMON API callers eventually use damon_set_regions() to setup the regions. Add the validation logic in the function.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 43b0536cb4710e7bb591edfda7e68a1c327a3409 before 71cf8a3ee1c18cfa8b88cc14bac9c2f43dd29f9b; from 43b0536cb4710e7bb591edfda7e68a1c327a3409 before b585facbafbb5cf117b37b1c75819ac046646c27; from 43b0536cb4710e7bb591edfda7e68a1c327a3409 before c927b73a5694c735314ea10e7c81c07f9bd51ad7; 43b0536cb4710e7bb591edfda7e68a1c327a3409 builds before 4b6f1d6d5d07855bd1bb9e64922b049062138bfa; 43b0536cb4710e7bb591edfda7e68a1c327a3409 builds before 43aaddd0fa92010a68adeda7744c7cf497a1c8e9; from 43b0536cb4710e7bb591edfda7e68a1c327a3409 before 1292c0ecb1caefb8ca064a3639d5673991e8810c | CNA record |
References
- https://git.kernel.org/stable/c/71cf8a3ee1c18cfa8b88cc14bac9c2f43dd29f9b
- https://git.kernel.org/stable/c/b585facbafbb5cf117b37b1c75819ac046646c27
- https://git.kernel.org/stable/c/c927b73a5694c735314ea10e7c81c07f9bd51ad7
- https://git.kernel.org/stable/c/4b6f1d6d5d07855bd1bb9e64922b049062138bfa
- https://git.kernel.org/stable/c/43aaddd0fa92010a68adeda7744c7cf497a1c8e9
- https://git.kernel.org/stable/c/1292c0ecb1caefb8ca064a3639d5673991e8810c
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.