CVE-2026-23142
Memory Leak in Linux Kernel DAMON sysfs on Setup Failure
Publication date: 2026-02-14
Last updated on: 2026-03-17
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | From 6.13 (inc) to 6.18.7 (exc) |
| linux | linux_kernel | 6.19 |
| linux | linux_kernel | 6.19 |
| linux | linux_kernel | 6.19 |
| linux | linux_kernel | 6.19 |
| linux | linux_kernel | 6.19 |
| linux | linux_kernel | From 6.2 (inc) to 6.6.122 (exc) |
| linux | linux_kernel | From 6.7 (inc) to 6.12.67 (exc) |
| linux | linux_kernel | From 5.18 (inc) to 6.1.162 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability occurs in the Linux kernel's DAMON sysfs interface, specifically related to the setup of the access_pattern subdirectories under the DAMOS-scheme directory.
If the setup of the DAMOS-scheme DAMON sysfs directory fails after creating the access_pattern/ directory, the subdirectories inside access_pattern/ are not properly cleaned up.
This failure to clean up leaves leftover directories that cause the DAMON sysfs interface to become nearly broken until the system is rebooted, and it also results in a memory leak due to the unremoved directories.
How can this vulnerability impact me? :
The impact of this vulnerability is that the DAMON sysfs interface in the Linux kernel can become nearly unusable until the system is rebooted.
Additionally, the failure to clean up the access_pattern subdirectories causes a memory leak, which could degrade system performance or stability over time.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
I don't know
What immediate steps should I take to mitigate this vulnerability?
I don't know