CVE-2026-46020

kernel: mm/damon/core: validate damos_quota_goal->nid for node_mem_{used,free}_bp

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 27, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's DAMON (Data Access MONitor) core. A privileged local user can exploit this vulnerability by providing an invalid node ID to damos_quota_goal->nid for node_mem_{used,free}_bp via the DAMON user-space tool. This improper validation can lead to an out-of-bounds memory access, potentially causing a kernel NULL pointer dereference and system instability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-1285 · Improper Validation of Specified Index, Position, or Offset in Input