CVE-2026-46067
kernel: mm/damon/core: validate damos_quota_goal->nid for node_memcg_{used,free}_bp
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 27, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's DAMON (Data Access MONitor) core component. A local user could exploit this vulnerability by providing an invalid node identifier (nid) when configuring memory usage tracking goals. This lack of validation allows for out-of-bounds memory access, which can lead to a system crash and result in a denial of service.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-1285 · Improper Validation of Specified Index, Position, or Offset in Input