CVE-2026-64239

A flaw was found in the Linux kernel's Data Access Monitor (DAMON) system file system (sysfs) component. A local user could exploit a timing issue during the refresh of DAMON region directories, leading to a use-after-free vulnerability. This could result in memory corruption, potentially causing system instability or allowing for arbitrary code execution.

This vulnerability is rated as Moderate impact because exploitation requires local access to manipulate Data Access Monitor (DAMON) sysfs control files, constraining the blast radius compared to network-facing risks. In typical Red Hat Enterprise Linux environments, DAMON sysfs interfaces are not active by default and generally require elevated privileges to configure and refresh schemes. Because successful exploitation relies on triggering a tight timing window during rapid region directory updates on an actively monitored system, the threat is largely restricted to local denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.