The vulnerability exists in the Linux kernel’s DAMON Sample MTIER module, where the function damos_quota_score performs a division with a target value supplied by the user through sysfs parameters. If the target value is zero, a division by zero occurs, resulting in a kernel oops that crashes the operating system. The flaw is a classic division‑by‑zero error (CWE‑369) and can lead to loss of availability and potential data loss if the system is forced to reboot. It does not provide remote code execution or privilege escalation by itself, but any local user with permission to modify the module parameters can trigger the crash.

The issue affects Linux kernel builds that ship the damon_sample_mtier module, notably the DAMON_SAMPLE_MTIER and DAMON_LRU_SORT variants. Specific version information is not provided; any kernel configuration enabling the damon_sample_mtier module is potentially vulnerable unless the parameters are protected against zero values.

The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, suggesting limited or unobserved exploitation activity. The CVSS score is unspecified, but the attack vector is local: it requires a user with permissions to write to /sys/module/damon_sample_mtier/parameters. Once that privilege is obtained, the attacker can set a zero value for node0_mem_{used,free}_bp and trigger an immediate kernel crash. Because the impact is a DoS and the exploitation path is straightforward for privileged users, the overall risk is moderate to high for affected systems that use this module without additional safeguards.