SB20260828208 - Improper input validation in Linux kernel damon

Description

This security bulletin contains information about 1 vulnerability.

1) Improper input validation (CVE-ID: CVE-2026-80592)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper input validation in samples/damon/mtier.c when handling sysfs writes that enable the mtier sample module with invalid address range parameters. A local user can write invalid address range values to trigger a kernel warning and cause a denial of service.

The issue can occur if node0 or node1 address parameters are not properly initialized, including cases where automatic node address detection is enabled and one of the nodes is memoryless.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/7746d72c64054976887928d64d2caf25c5a6dcc0
• https://git.kernel.org/stable/c/9d360fb820a3b9576d155e720ec44fef54d2efb5
• https://git.kernel.org/stable/c/db20589d7b248211f63f4a7f642a49c0832b13ae