The Linux kernel’s DAMON subsystem introduced a bug that allows regions to be created with sizes that are not powers of two—the damon_start interface does not enforce power‑of‑two alignment. This omission permits the allocation of misaligned memory ranges, which can corrupt kernel memory during region Initialization or trigger a system crash. The description does not specify an exact outcome, but such misalignment is sufficient to compromise kernel data integrity.

The flaw resides in the Linux kernel; it is present in kernel releases that include commit d8f867fa but lack the subsequent patch c80f46ac that adds a power‑of‑two check to damon_start. Affected kernels are therefore those that have not yet integrated the fix, and the vulnerability applies to any system running such a kernel regardless of distribution.

Based on the description it is inferred that the attack vector involves local modification of the DAMON sysfs interface; the flaw permits the use of non‑power‑of‑two min_region_sz values when invoking damon_start(). The EPSS score is < 1% and the vulnerability is not listed in the CISA KEV catalog. The CVSS score is 5.5, indicating medium severity. Because the vulnerability involves writing to the DAMON sysfs interface, it requires local system access with the privileges needed to write to sysfs; remote exploitation is unlikely without prior escalation. The lack of reported public exploit activity suggests a moderate risk, but the potential for kernel memory corruption means denial‑of‑service and possibly escalation remain realistic concerns for locally‑reachable systems.