CVE-2026-68165

A flaw was found in the Linux kernel's Data Access MONitor (DAMON) core logic. A local user could exploit this by providing invalid, zero-length memory region ranges through DAMON's application programming interface (API) callers. This improper input validation can lead to a divide-by-zero error, potentially causing a system crash and resulting in a Denial of Service (DoS).

Red Hat has rated this vulnerability as Low severity because manipulating the monitoring ranges requires access to privileged sysfs control interfaces. In default enterprise deployments, the Data Access Monitor (DAMON) facility is not active. Even when in use, triggering the resulting division-by-zero condition requires elevated privileges to commit invalid memory region parameters, meaning unprivileged users cannot independently disrupt kernel availability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.