PT-2026-34363 · Linux · Linux Kernel

Published 2026-04-22 · Updated 2026-06-05 · CVE-2026-31458

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description Multiple sysfs command paths dereference contexts arr[0] without verifying that kdamond->contexts->nr equals 1. A privileged user can set nr contexts to 0 via sysfs while DAMON is running, leading to NULL pointer dereferences. This occurs when executing commands such as 'update schemes stats', 'update schemes tried regions', 'update schemes tried bytes', 'update schemes effective quotas', or 'update tuned intervals' through the state file in the sysfs path '/sys/kernel/mm/damon/admin/kdamonds/0'.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2026-31458

ECHO-0650-E29C-EFF2

Affected Products

Linux Kernel

References · 16

• https://cve.org/CVERecord?id=CVE-2026-31458 · Security Note
• https://git.kernel.org/stable/c/1e8da792672481d603fa7cd0d815577220a3ee27 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31458 · Security Note
• https://ubuntu.com/security/CVE-2026-31458 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31458 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31458 · Vendor Advisory
• https://git.kernel.org/stable/c/708033c231bd782858f4ddbb46ee874a5a5fbdab · Patch
• https://git.kernel.org/stable/c/bbe03ad3fb9e714191757ca7b41582f930be7be2 · Patch
• https://git.kernel.org/stable/c/1bfe9fb5ed2667fb075682408b776b5273162615 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-31458 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-31458 · Vendor Advisory
• https://git.kernel.org/stable/c/aba546061341b56e9ffb37e1eb661a3628b6ec12 · Patch
• https://t.me/cveNotify/166224 · Telegram Post
• https://twitter.com/CVEnew/status/2046980030526357549 · Twitter Post
• https://docs.bell-sw.com/security/cves/CVE-2026-31458 · Note