SB20260812380 - Improper input validation in Linux kernel damon

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20260812380

SB20260812380 - Improper input validation in Linux kernel damon

Published: August 12, 2026

Security Bulletin ID SB20260812380
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Improper input validation (CVE-ID: CVE-2026-68164)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper input validation in damon_set_regions() when processing overlapping input ranges. A local user can provide overlapping or invalid address ranges to trigger a division by zero and cause a denial of service.

The issue can also lead to unexpected DAMON and DAMOS behavior, including malformed monitoring results and repeated application of actions to overlapping regions.


Remediation

Install update from vendor's website.

References