The Linux kernel function damon_set_regions() was written to assume that the input memory ranges were sorted by address and did not overlap each other. A commit removed the explicit validation for this assumption, allowing callers to submit overlapping ranges. When overlapping ranges are processed the logic can compute negative sizes, trigger a WARN_ONCE when debug checks are enabled, and in the worst case cause a division‑by‑zero inside damon_merge_two_regions(), which can crash the kernel. The result is uncontrolled kernel behavior that could lead to a system reboot or loss of availability.

All Linux kernel releases that include damon_set_regions() and the associated sysfs interface are potentially affected. No specific kernel version is listed, so the issue applies to any build until the missing validation is restored by the upstream patch.

The vulnerability is not currently listed in CISA KEV and EPSS data is unavailable, yet the potential for a kernel crash implies a high impact. Exploitation would require creating or modifying DAMON regions via the sysfs interface, which is normally restricted to privileged users. A local attacker with sufficient rights could trigger the divide‑by‑zero by supplying carefully crafted overlapping ranges, effectively bringing the system down for a denial‑of‑service attack. The absence of public exploit code does not reduce the risk because the flaw directly leads to kernel instability.