CVE-2026-74643
kernel: samples/damon/mtier: error out for zero quota goal target values
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 22, 2026
Updated · October 18, 2026
Description
A flaw was found in the Linux kernel's DAMON_SAMPLE_MTIER module. A local user can trigger a division-by-zero error in the damos_quota_score() function by providing zero values for the node0_mem_used_bp or node0_mem_free_bp parameters when enabling the module. This vulnerability leads to a kernel crash, resulting in a Denial of Service (DoS) for the system.
Statement
A moderate severity flaw was found in the Linux kernel's DAMON_SAMPLE_MTIER sample module. A local user with permission to configure the module could set the node0_mem_used_bp or node0_mem_free_bp module parameters to zero, triggering a division-by-zero error in the damos_quota_score() function when DAMON is enabled. This results in a kernel oops and crash, causing a denial of service. Red Hat Enterprise Linux and Red Hat In-Vehicle OS are not affected by this vulnerability because the vulnerable code is not present in the shipped kernel packages.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-369 · Divide By Zero