CVE-2026-52905

kernel: mm/damon/core: disallow non-power of two min_region_sz on damon_start()

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 9, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's Data Access MONitor (DAMON) core. The damon_start() function, when used via the DAMON sysfs interface, failed to properly validate the min_region_sz parameter. This allowed non-power of two values, which could lead to unaligned DAMON region address ranges and potentially result in a Denial of Service (DoS) due to system instability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-1284 · Improper Validation of Specified Quantity in Input