Description
In the Linux kernel, the following vulnerability has been resolved:

mm/damon/lru_sort: handle ctx allocation failure

DAMON_LRU_SORT allocates the damon_ctx object for its kdamond in its init
function. damon_lru_sort_enabled_store() wrongly assumes the allocation
will always succeed once tried. If the damon_ctx allocation was failed,
therefore, code execution reaches to damon_commit_ctx() while 'ctx' is
NULL. As a result, it dereferences the NULL 'ctx' pointer. Avoid the
NULL dereference by returning -ENOMEM if 'ctx' is NULL.
Published: 2026-07-01
Score: n/a
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

In the Linux kernel, the DAMON LRU SORT component allocates a damon_ctx object during initialization. The code assumes that the allocation always succeeds, but if it fails a null pointer is later dereferenced in damon_commit_ctx(), causing a kernel panic that disrupts system availability.

Affected Systems

The vulnerability exists in the mainline Linux kernel wherever the DAMON LRU SORT code path is enabled. All kernels containing this code, without the patch, are potentially impacted until an updated kernel is deployed.

Risk and Exploitability

The EPSS score is less than 1%, indicating a very low probability of exploitation, and the flaw is not listed in CISA’s KEV catalog. The likely attack vector is a local or privileged userru_sort_enabled_store(), which would lead to a kernel panic and a denial‑of‑service condition.

Generated by OpenCVE AI on July 22, 2026 at 14:28 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update to the latest Linux kernel version that includes the fix for DAMON LRU SORT allocation failures.
  • Reboot to load the patched kernel and eliminate the vulnerable code path.
  • If an update is pending, disable or remove the DAMON LRU SORT feature via kernel configuration options (e.g., set CONFIG_DAMON=y to m or n), or coordinate a backport with maintainers to include the fix.

Generated by OpenCVE AI on July 22, 2026 at 14:28 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 02 Jul 2026 00:15:00 +0000


Wed, 01 Jul 2026 13:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: mm/damon/lru_sort: handle ctx allocation failure DAMON_LRU_SORT allocates the damon_ctx object for its kdamond in its init function. damon_lru_sort_enabled_store() wrongly assumes the allocation will always succeed once tried. If the damon_ctx allocation was failed, therefore, code execution reaches to damon_commit_ctx() while 'ctx' is NULL. As a result, it dereferences the NULL 'ctx' pointer. Avoid the NULL dereference by returning -ENOMEM if 'ctx' is NULL.
Title mm/damon/lru_sort: handle ctx allocation failure
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-07-01T13:32:17.953Z

Reserved: 2026-06-09T07:44:35.399Z

Link: CVE-2026-53335

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

Severity :

Publid Date: 2026-07-01T00:00:00Z

Links: CVE-2026-53335 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-07-22T14:30:17Z

Weaknesses