SB20260529120 - Use-after-free in Linux kernel damon

Description

This security bulletin contains information about 1 vulnerability.

1) Use-after-free (CVE-ID: CVE-2026-46183)

CWE-ID: CWE-416 - Use After Free

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

The vulnerability allows a local user to disclose sensitive information.

The vulnerability exists due to use-after-free in damon_sysfs_quot_goal->path handling in the DAMON sysfs 'path' file when performing concurrent reads and writes through separate open files. A local user can trigger concurrent access to read freed memory and disclose sensitive information.

The issue does not race when the same open file is used for both operations due to kernfs open file locking.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/a34ca3e33da4b924c66bcca3729bf68ec5936910
• https://git.kernel.org/stable/c/cf3b71421ca00807328c6d9cd242f9de3b77a4bf