The Linux kernel’s DAMON subsystem introduced a bug that allows regions to be created with sizes that are not powers of two—the damon_start interface does not enforce power‑of‑two alignment. This omission permits the allocation of misaligned memory ranges, which can corrupt kernel memory during region Initialization or trigger a system crash. The description does not specify an exact outcome, but such misalignment is sufficient to compromise kernel data integrity.

The flaw resides in the Linux kernel; it is present in kernel releases that include commit d8f867fa but lack the subsequent patch c80f46ac that adds a power‑of‑two check to damon_start. Affected kernels are therefore those that have not yet integrated the fix, and the vulnerability applies to any system running such a kernel regardless of distribution.

The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. No CVSS score is provided, so the exact severity cannot be quantified. Because the vulnerability involves writing to the DAMON sysfs interface, it requires local system access with the privileges needed to write to sysfs; remote exploitation is unlikely without prior escalation. The lack of reported public exploit activity suggests a moderate risk, but the potential for kernel memory corruption means denial‑of‑service and possibly escalation remain realistic concerns for locally‑reachable systems.