Description
In the Linux kernel, the following vulnerability has been resolved:

mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs()

Patch series "mm/damon/sysfs-schemes: fix wrong directories put orders in
error paths".

Error paths of damon_sysfs_access_pattern_add_dirs() and
damon_sysfs_scheme_add_dirs() functions put references to directories in
wrong orders. As a result, uninitialized memory dereference and/or
memory leak can happen. Fix those.


This patch (of 2):

In access_pattern_add_dirs(), error handling path puts references starting
from setup failed directories. If the failure happpened from the initial
allication in the setup functions, uninitialized memory dereference
happen. The allocation failures will not commonly happen, but the
consequence is quite bad. Fix the wrong reference put orders.

The issue was discovered [1] by Sashiko.
Published: 2026-08-15
Score: n/a
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

In the Linux kernel the damon sysfs scheme handling contains a logic error that causes references to directories to be added in an incorrect order on error paths. As a result an uninitialized memory dereference can occur and a memory leak may also be triggered. The failure arrises during the cleanup phase of damon_sysfs_access_pattern_add_dirs() and damon_sysfs_scheme_add_dirs() when setup functions fail, which could lead to a kernel crash or kernel memory corruption. This vulnerability can impact system reliability and integrity by forcing the kernel to abort or release memory incorrectly.

Affected Systems

This flaw affects the Linux kernel itself; the specific vendor is Linux and the product is the generic Linux kernel image. The CVE entry does not list any full patch level or release version, so all kernel builds that contain the unpatched access_pattern_add_dirs() logic are potentially vulnerable until the fix is applied.

Risk and Exploitability

A publicly available exploit has not been reported and the vulnerability is not listed in the CISA KEV catalog. The EPSS score is not available, but the flaw requires local code execution or privileged interaction with the damon sysfs interface to trigger the error path. The consequence would be a denial of service by crashing the kernel or leaking memory, which is a severe but presently low-visibility risk due to the lack of known remote exploitation vectors.

Generated by OpenCVE AI on August 15, 2026 at 09:07 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the Linux kernel to a release that incorporates the patch that corrects the directory reference ordering in damon sysfs operations.
  • If a kernel update is not immediately possible, remove or restrict access to the damaged damon sysfs directories (e.g., by setting appropriate permissions or unmounting the affected sysfs entries) until the vulnerability is fixed.
  • After applying the patch or implementing the temporary restriction, reboot the system so the updated kernel code is active and verify that the affected sysfs paths are functioning correctly.

Generated by OpenCVE AI on August 15, 2026 at 09:07 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 15 Aug 2026 09:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-457

Sat, 15 Aug 2026 06:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs() Patch series "mm/damon/sysfs-schemes: fix wrong directories put orders in error paths". Error paths of damon_sysfs_access_pattern_add_dirs() and damon_sysfs_scheme_add_dirs() functions put references to directories in wrong orders. As a result, uninitialized memory dereference and/or memory leak can happen. Fix those. This patch (of 2): In access_pattern_add_dirs(), error handling path puts references starting from setup failed directories. If the failure happpened from the initial allication in the setup functions, uninitialized memory dereference happen. The allocation failures will not commonly happen, but the consequence is quite bad. Fix the wrong reference put orders. The issue was discovered [1] by Sashiko.
Title mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:53:41.496Z

Reserved: 2026-08-09T03:40:39.910Z

Link: CVE-2026-72177

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:21:35.937

Modified: 2026-08-15T06:21:35.937

Link: CVE-2026-72177

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-15T09:15:04Z

Weaknesses
  • CWE-457

    Use of Uninitialized Variable