CVE Database›Document archive›CVE-2026-74643

CVE-2026-74643

kernel: samples/damon/mtier: error out for zero quota goal target values

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · August 22, 2026

Updated · October 18, 2026

Description

A flaw was found in the Linux kernel's DAMON_SAMPLE_MTIER module. A local user can trigger a division-by-zero error in the damos_quota_score() function by providing zero values for the node0_mem_used_bp or node0_mem_free_bp parameters when enabling the module. This vulnerability leads to a kernel crash, resulting in a Denial of Service (DoS) for the system.

Statement

A moderate severity flaw was found in the Linux kernel's DAMON_SAMPLE_MTIER sample module. A local user with permission to configure the module could set the node0_mem_used_bp or node0_mem_free_bp module parameters to zero, triggering a division-by-zero error in the damos_quota_score() function when DAMON is enabled. This results in a kernel oops and crash, causing a denial of service. Red Hat Enterprise Linux and Red Hat In-Vehicle OS are not affected by this vulnerability because the vulnerable code is not present in the shipped kernel packages.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-369 · Divide By Zero