Impact
In the Linux kernel the damon sysfs scheme handling contains a logic error that causes references to directories to be added in an incorrect order on error paths. As a result an uninitialized memory dereference can occur and a memory leak may also be triggered. The failure arrises during the cleanup phase of damon_sysfs_access_pattern_add_dirs() and damon_sysfs_scheme_add_dirs() when setup functions fail, which could lead to a kernel crash or kernel memory corruption. This vulnerability can impact system reliability and integrity by forcing the kernel to abort or release memory incorrectly.
Affected Systems
This flaw affects the Linux kernel itself; the specific vendor is Linux and the product is the generic Linux kernel image. The CVE entry does not list any full patch level or release version, so all kernel builds that contain the unpatched access_pattern_add_dirs() logic are potentially vulnerable until the fix is applied.
Risk and Exploitability
A publicly available exploit has not been reported and the vulnerability is not listed in the CISA KEV catalog. The EPSS score is not available, but the flaw requires local code execution or privileged interaction with the damon sysfs interface to trigger the error path. The consequence would be a denial of service by crashing the kernel or leaking memory, which is a severe but presently low-visibility risk due to the lack of known remote exploitation vectors.
OpenCVE Enrichment