Impact
In the Linux kernel, the DAMON LRU SORT component allocates a damon_ctx object during initialization. The init code assumes that the allocation always succeeds, but when a memory allocation failure occurs, the subsequent call to damon_commit_ctx dereferences a NULL pointer, causing a kernel panic that brings the system down and results in a denial‑of‑service condition.
Affected Systems
The vulnerability is present in the mainline Linux kernel wherever the DAMON LRU SORT functionality is compiled. All kernels containing this code path, without the patch, are potentially impacted until an updated kernel is deployed.
Risk and Exploitability
The EPSS score is below 1%, indicating a very low probability of exploitation, and the flaw is not listed in CISA’s KEV catalog. The likely attack vector is local or privileged; an attacker can trigger the enabled_store interface, causing a failed allocation under low‑memory conditions, or simply wait for an allocation failure to occur naturally, which would then lead to a kernel panic and loss of availability.
OpenCVE Enrichment