CVE-2026-68165
Received Received - Intake

Buffer Overflow in Linux Kernel DAMON Core

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: validate ranges in damon_set_regions() DAMON core logic assumes zero length regions don't exist. However, a few DAMON API callers including DAMON_SYSFS, DAMON_RECLAIM and DAMON_LRU_SORT allow users to set empty monitoring target regions. This could result in WARN_ONCE() on CONFIG_DAMON_DEBUG_SANITY enabled kernel, and divide-by-zero from damon_merge_two_regions(). For example, the WANR_ONCE() can be triggered like below. # grep DAMON_DEBUG_SANITY /boot/config-$(uname -r) # CONFIG_DAMON_DEBUG_SANITY=y # damo start # cd /sys/kernel/mm/damon/admin/kdamonds/0 # echo 0 > contexts/0/targets/0/regions/0/start # echo 0 > contexts/0/targets/0/regions/0/end # echo commit > state # dmesg [....] [ 73.705780] ------------[ cut here ]------------ [ 73.707552] start 0 >= end 0 [ 73.708452] WARNING: mm/damon/core.c:359 at damon_new_region+0x6e/0x80, CPU#1: kdamond.0/758 [...] All DAMON API callers eventually use damon_set_regions() to setup the regions. Add the validation logic in the function.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68165
EUVD
EUVD-2026-55551

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves DAMON (Data Access Monitor) core logic. It occurs when users set empty monitoring target regions, which the DAMON API callers like DAMON_SYSFS, DAMON_RECLAIM, and DAMON_LRU_SORT allow. This can trigger a WARN_ONCE() if CONFIG_DAMON_DEBUG_SANITY is enabled and cause a divide-by-zero error in damon_merge_two_regions().

Detection Guidance

Check if CONFIG_DAMON_DEBUG_SANITY is enabled by running grep DAMON_DEBUG_SANITY /boot/config-$(uname -r). If enabled, attempt to set empty monitoring regions via DAMON_SYSFS, DAMON_RECLAIM, or DAMON_LRU_SORT and observe for WARN_ONCE() or divide-by-zero errors in dmesg.

Impact Analysis

This vulnerability can cause kernel warnings or crashes if CONFIG_DAMON_DEBUG_SANITY is enabled. It may lead to system instability or unexpected behavior when users manipulate monitoring regions in DAMON.

Mitigation Strategies

Apply the Linux kernel patch that adds validation in damon_set_regions(). Avoid setting empty monitoring target regions in DAMON API callers. Monitor system logs for WARN_ONCE() or divide-by-zero errors.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68165. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart