An allocation failure in the DAMON_RECLAIM and DAMON_LRU_SORT parts of the Linux kernel causes a NULL pointer dereference during module initialization. If the damon_ctx structure cannot be allocated, the code continues to use a NULL context pointer, resulting in a kernel OOPS and system crash.

All Linux kernel builds that compile the DAMON_RECLAIM or DAMON_LRU_SORT modules without the mm/damon/{reclaim,lru_sort} patch series are vulnerable. This includes custom kernels, distribution kernels that enable DAMON by default, and embedded or specialized images that include these subsystems.

The EPSS score is less than 1%, indicating a very low likelihood of exploitation in practice, and the vulnerability is not listed in the CISA KEV catalog, meaning no publicly known exploits. Based on the description, it is inferred that the attack would require a damon_ctx allocation to fail during module initialization, a situation that is rare and might occur only under high memory pressure or constrained system resources. No attractive remote attack vector is indicated.