In the Linux kernel, the DAMON subsystem fails to validate zero‑length monitoring regions. When such a region is configured, damon_set_regions() accepts the input and later damon_merge_two_regions() performs a division by the region size, which can trigger a division‑by‑zero or cause a WARN_ONCE() if the debug sanity check is enabled. This flaw does not alter data but can lead to a kernel panic or system halt, resulting in a denial of service.

The vulnerability exists in the generic Linux kernel, affecting any kernel build that enables the DAMON feature. No specific kernel version list is provided, but any release that contains the unpatched damon_set_regions() logic is impacted. Systems that expose the DAMON sysfs interface for sysadmin configuration are the most likely touch points.

There are no EPSS values and the KEV status indicates it is not listed in CISA's Known Exploited Vulnerabilities catalog. Based on the description, it is inferred that the attacker must have permission to write to the DAMON sysfs paths, i.e. privileged users or root. While an attacker cannot gain arbitrary code execution, the ability to cause a division‑by‑zero can bring the system down, a high‑impact Denial of Service with an exploitation probability that appears low but is serious if enabled. The risk is aggravated by the debug sanity option which makes the warning visible for monitoring.