SB20260824178 - Division by zero in Linux kernel damon

Description

This security bulletin contains information about 1 vulnerability.

1) Division by zero (CVE-ID: CVE-2026-74645)

CWE-ID: CWE-369 - Divide By Zero

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to division by zero in the damos_quota_score function in the mm/damon/lru_sort subsystem when processing an active_mem_bp parameter value greater than 10000 during DAMON_LRU_SORT startup. A local user can set a crafted module parameter value and enable the feature to cause a denial of service.

Exploitation requires write access to DAMON module parameters.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/06befa61c427e74319781e6f35a364cfc32dbae8
• https://git.kernel.org/stable/c/e7e5e5e0dfe2ea171044c24c263efae4ee882b3f