Description
In the Linux kernel, the following vulnerability has been resolved:

mm/damon/lru_sort: handle ctx allocation failure

DAMON_LRU_SORT allocates the damon_ctx object for its kdamond in its init
function. damon_lru_sort_enabled_store() wrongly assumes the allocation
will always succeed once tried. If the damon_ctx allocation was failed,
therefore, code execution reaches to damon_commit_ctx() while 'ctx' is
NULL. As a result, it dereferences the NULL 'ctx' pointer. Avoid the
NULL dereference by returning -ENOMEM if 'ctx' is NULL.
Published: 2026-07-01
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

In the Linux kernel, the DAMON LRU SORT component allocates a damon_ctx object during initialization. The init code assumes that the allocation always succeeds, but when a memory allocation failure occurs, the subsequent call to damon_commit_ctx dereferences a NULL pointer, causing a kernel panic that brings the system down and results in a denial‑of‑service condition.

Affected Systems

The vulnerability is present in the mainline Linux kernel wherever the DAMON LRU SORT functionality is compiled. All kernels containing this code path, without the patch, are potentially impacted until an updated kernel is deployed.

Risk and Exploitability

The EPSS score is below 1%, indicating a very low probability of exploitation, and the flaw is not listed in CISA’s KEV catalog. The likely attack vector is local or privileged; an attacker can trigger the enabled_store interface, causing a failed allocation under low‑memory conditions, or simply wait for an allocation failure to occur naturally, which would then lead to a kernel panic and loss of availability.

Generated by OpenCVE AI on August 1, 2026 at 23:38 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply a Linux kernel update that includes the DAMON LRU SORT allocation failure fix.
  • Reboot the system so the patched kernel is loaded.
  • If an immediate update is unavailable, disable the DAMON LRU SORT feature via kernel configuration or sysfs to avoid the fault path, or coordinate a backport of the patch with maintainers.

Generated by OpenCVE AI on August 1, 2026 at 23:38 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 02 Jul 2026 00:15:00 +0000


Wed, 01 Jul 2026 13:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: mm/damon/lru_sort: handle ctx allocation failure DAMON_LRU_SORT allocates the damon_ctx object for its kdamond in its init function. damon_lru_sort_enabled_store() wrongly assumes the allocation will always succeed once tried. If the damon_ctx allocation was failed, therefore, code execution reaches to damon_commit_ctx() while 'ctx' is NULL. As a result, it dereferences the NULL 'ctx' pointer. Avoid the NULL dereference by returning -ENOMEM if 'ctx' is NULL.
Title mm/damon/lru_sort: handle ctx allocation failure
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-07-01T13:32:17.953Z

Reserved: 2026-06-09T07:44:35.399Z

Link: CVE-2026-53335

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2026-07-01T14:16:41.460

Modified: 2026-07-23T21:33:33.100

Link: CVE-2026-53335

cve-icon Redhat

Severity :

Publid Date: 2026-07-01T00:00:00Z

Links: CVE-2026-53335 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-01T23:45:03Z

Weaknesses